aws-samples/iam-identity-center-team

CloudTrail Event Data Store

vforvarun opened this issue · 2 comments

We are trying to setup CloudTrail Event Data Store (EDS) as a pre-requiste to deploy TEAM solution.

As suggested in the bug report #236, we are creating the EDS using CloudFormation.

  1. In which account do we need to create the EDS?
  2. Should we create a EDS at the organizational level? If yes, then, it needs to created either in the Master Account or in the delegated admin account outside of TEAM. But the pre-requisites says that the TEAM account is the deleted admin account.
  3. But then there is another bug #202, which prevents loading of the session logs if the EDS is created in an account other than the TEAM account.

So we are confused on how to create the EDS. The document is not very clear on what parameters to use to the EDS, can you please let us know what those are?

@vforvarun the EDS needs to be created in the same account where TEAM is deployed

Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 7 days it will automatically be closed.