Policy: AWS > Turbot > Audit Trail > CloudTrail > Trail > Include Global Service Events

Determine whether or not events from global services (such as IAM, STS, CloudFront, and Route 53) are logged to the Guardrails trail.

If you have multiple single region trails, consider configuring your trails so that global service events are delivered in only one of the trails.

Resource Types

This policy targets the following resource types:

AWS > Region

Primary Policy

This policy is used with the following primary policy:

AWS > Turbot > Audit Trail > CloudTrail > Trail

Controls

Policy Specification

Schema Type	`string`
Default	`Enabled: Include Global Service Events`
Valid Values [YAML]	`Enabled: Include Global Service Events` `Disabled: Do not include Global Service Events`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceLogging

Policy Type URI

tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents

GraphQL

query policyType(id: "tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws#/policy/types/trailIncludeGlobalServiceEvents"