CloudTrail trail should be multi-region

What it checks

CloudTrail trail should be multi-region

Where it applies

Terraform: aws_cloudtrail

CloudFormation: AWS::CloudTrail::Trail

How to fix it

1. Set is_multi_region_trail = true and include_global_service_events = true to capture IAM and STS events across all regions.

Frameworks

• AWS FSBP CloudTrail.1
• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules