> For the complete documentation index, see [llms.txt](https://docs.expel.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/get-started-with-aws-cloudtrail-setup.md).

# Get Started with AWS CloudTrail Setup

Integrating your AWS CloudTrail service with Workbench allows Expel to gain insight into the activities that are occurring within your AWS account and to effectively monitor for suspicious events on your behalf. To onboard successfully, you will need to create or leverage a trail and then make your S3 bucket available to Expel, which will enable us to access the event logs.

## Setup Options

You have several options for onboarding. Select a link to get started:

1. [Manually configure your integration with a new trail.](/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-new-trail.md)
2. [Manually configure your integration with a new trail using GovCloud.](/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-govcloud-cloudtrail-manual-setup-new-trail.md)
3. [Manually configure your integration using an existing trail.](/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-existing-trail.md)
4. [Manually configure your integration using an existing trail with ControlTower.](/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-with-control-tower-existing-trail.md)
5. [Automatically configure your integration with our Wizard.](https://workbench.expel.io/settings/security-devices?setupIntegration=aws) You may use a new trail or an existing trail; if you are using a new trail, you may also connect via a CloudFormation template (see below for more information). 

{% hint style="warning" %}
You cannot use the wizard for GovCloud.
{% endhint %}

### About the CloudFormation Template

As an alternative to manual setup of a new trail, Expel offers a CloudFormation template to perform the necessary AWS configurations for an organization or an individual account. Using a template does not run anything on your AWS account. Instead, the template populates CloudFormation with the appropriate steps, you review those steps, and then you decide whether or not to execute them.

For organizations, the template will create a stackset to configure the permissions on each of your accounts. The stackset can also be left in place to automatically run on any new accounts you create for your organization in the future.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/get-started-with-aws-cloudtrail-setup.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.