{
	"id": "f060db92-3984-473d-81be-faffcf408935",
	"created_at": "2026-04-06T01:32:12.682844Z",
	"updated_at": "2026-04-10T03:20:42.485621Z",
	"deleted_at": null,
	"sha1_hash": "75cca329aabae344d97c46a22df7fbc01b23337f",
	"title": "Stopping CloudTrail from sending events to CloudWatch Logs",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 34753,
	"plain_text": "Stopping CloudTrail from sending events to CloudWatch Logs\r\nArchived: 2026-04-06 00:33:37 UTC\r\nYou can stop sending AWS CloudTrail events to Amazon CloudWatch Logs by updating a trail to disable\r\nCloudWatch Logs settings.\r\nStop sending events to CloudWatch Logs (console)\r\nTo stop sending CloudTrail events to CloudWatch Logs\r\n1. Sign in to the AWS Management Console and open the CloudTrail console at\r\nhttps://console.aws.amazon.com/cloudtrail/.\r\n2. In the navigation pane, choose Trails.\r\n3. Choose the name of the trail for which you want to disable CloudWatch Logs integration.\r\n4. In CloudWatch Logs, choose Edit.\r\n5. Clear the Enabled check box.\r\n6. Choose Save changes.\r\nStop sending events to CloudWatch Logs (CLI)\r\nYou can remove the CloudWatch Logs log group as a delivery endpoint by running the update-trail command. The\r\nfollowing command clears the log group and role from the trail configuration by replacing the values for the log\r\ngroup ARN and CloudWatch Logs role ARN with empty values.\r\naws cloudtrail update-trail --name trail_name --cloud-watch-logs-log-group-arn=\"\" --cloud-watch-logs-role-arn=\r\nSource: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/stop-cloudtrail-from-sending-events-to-cloudwatch-logs.html\r\nhttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/stop-cloudtrail-from-sending-events-to-cloudwatch-logs.html\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/stop-cloudtrail-from-sending-events-to-cloudwatch-logs.html"
	],
	"report_names": [
		"stop-cloudtrail-from-sending-events-to-cloudwatch-logs.html"
	],
	"threat_actors": [],
	"ts_created_at": 1775439132,
	"ts_updated_at": 1775791242,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/75cca329aabae344d97c46a22df7fbc01b23337f.pdf",
		"text": "https://archive.orkl.eu/75cca329aabae344d97c46a22df7fbc01b23337f.txt",
		"img": "https://archive.orkl.eu/75cca329aabae344d97c46a22df7fbc01b23337f.jpg"
	}
}