What would be a reason for someone to send CloudTrail events to CloudWatch logs? I’m not grasping why this would be necessary.
By sending CloudTrail events to CloudWatch logs, you can create metrics based on custom filters, and then trigger CloudWatch events based on these
So that they can charge you for both services…
Maybe to use CloudWatch Logs Insights to search and analyze your CloudTrail logs.