I created a trail with data events:

But when I go into the management console and upload a file to any s3 bucket, i cannot see the PutObject Event anywhere in cloudtrail:

What am I missing?

CodePudding user response：

From the docs:

CloudTrail does not populate data events in the CloudTrail event history. Additionally, not all bucket-level actions are populated in the CloudTrail event history.

If you create a CloudTrail Trail manually, the management and data events recorded by this Trail are delivered to an S3 bucket and to CloudWatch Logs (if enabled). There are several tools to query S3 bucket data/CloudWatch Logs if you want to see these events.

Nevertheless, you wont be able to see data events in Event History, even if you enable them on a Trail created by you.