github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/cloudtrail/AVD-AWS-0014/Terraform.md (about) 1 2 Enable Cloudtrail in all regions 3 4 ```hcl 5 resource "aws_cloudtrail" "good_example" { 6 is_multi_region_trail = true 7 8 event_selector { 9 read_write_type = "All" 10 include_management_events = true 11 12 data_resource { 13 type = "AWS::S3::Object" 14 values = ["${data.aws_s3_bucket.important-bucket.arn}/"] 15 } 16 } 17 } 18 19 ``` 20 21 #### Remediation Links 22 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#is_multi_region_trail 23