# cloudtrail-all-read-s3-data-event-check
<a name="cloudtrail-all-read-s3-data-event-check"></a>

Checks if an Amazon CloudTrail multi-Region trail is enabled and logs all read S3 data events for your buckets. The rule is NON\_COMPLIANT if no multi-Region trail logs all read S3 data event types for all current and future S3 buckets. 



**Identifier:** CLOUDTRAIL\_ALL\_READ\_S3\_DATA\_EVENT\_CHECK

**Resource Types:** AWS::::Account

**Trigger type:** Periodic

**Amazon Web Services Region:** All supported Amazon regions except Asia Pacific (Malaysia), Mexico (Central), Asia Pacific (Taipei) Region

**Parameters:**

None  

## Amazon CloudFormation template
<a name="w2aac20c16c17b7d333c19"></a>

To create Amazon Config managed rules with Amazon CloudFormation templates, see [Creating Amazon Config Managed Rules With Amazon CloudFormation Templates](aws-config-managed-rules-cloudformation-templates.md).