Enable CloudTrail for AWS
We should ensure that we have global trails enabled within CloudTrail for AWS API audit logging
This may require creating/configuring a new S3 bucket for the CloudTrail logs (if an appropriate bucket doesn't already exist), and creating a default trail; for this default trail, we want to ensure that it is applied to all regions (step 5).
Edited by Craig Barrett