We are trying to setup CloudTrail Event Data Store (EDS) as a pre-requiste to deploy TEAM solution.
As suggested in the bug report #236, we are creating the EDS using CloudFormation.
In which account do we need to create the EDS?
Should we create a EDS at the organizational level? If yes, then, it needs to created either in the Master Account or in the delegated admin account outside of TEAM. But the pre-requisites says that the TEAM account is the deleted admin account.
But then there is another bug #202, which prevents loading of the session logs if the EDS is created in an account other than the TEAM account.
So we are confused on how to create the EDS. The document is not very clear on what parameters to use to the EDS, can you please let us know what those are?
We are trying to setup CloudTrail Event Data Store (EDS) as a pre-requiste to deploy TEAM solution.
As suggested in the bug report #236, we are creating the EDS using CloudFormation.
So we are confused on how to create the EDS. The document is not very clear on what parameters to use to the EDS, can you please let us know what those are?