AWS Org CloudTrail - Member Account Not Added Automatically

Question

CloudTrail has been setup to log all member accounts under the AWS Organizations. A new account is created however, the trail is not visible from the member account and nothing is being logged. Anyone know where to look to understand why this new account is not associated the main cloudtrail that was setup to do logging for all member accounts?

Answer

When you added new member account in the org, the trail was NOT added to the account?
If the trail has been enabled to the admin account of the org with IsOrganizationTrail true, the trail should be automatically added to new member accounts at the same time as created the accounts.

Did you setup anything SCP? (e.g. Deny create-trail)

AWS Org CloudTrail - Member Account Not Added Automatically

相关内容