Centralise S3 access logging in a Control Tower environment.

Yes this is possible. When setting up server access logging on your S3 buckets, be sure to specify a S3 bucket in the logging archive account.

Note, this setting is on a per bucket and not an account setting

Hi, all the details on how to do this are specified here: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html

For multi-region in same account: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/receive-cloudtrail-log-files-from-multiple-regions.html