3 Answers
By sending CloudTrail events to CloudWatch logs, you can create metrics based on custom filters, and then trigger CloudWatch events based on these
So that they can charge you for both services…
Maybe to use CloudWatch Logs Insights to search and analyze your CloudTrail logs.