How to audit s3 activity for 3rd party accounts?

We have 3rd parties who have access to S3 buckets under our ownership. We have enabled bucket logging and CloudTrail data event logging. This is working fine for internal users, however, we do not see the events generated by 3rd parties. How can we configure s3 so that we see events from all users?