Keith Rozario
I notice if I create an event for CreateUser on a trail in ap-southeast-1 it doesn’t work. I suspect it’s due to the fact that IAM users are always created in us-east-1. Is that correct?
You need a trail/events in us-east-1 to capture the IAM CreateUser event?