You are working as an AWS Architect for a global insurance firm. For the web application, you are using S3 buckets and have configured CloudFront to cache image files. For audit purposes, you have created a CloudTrail trail in each region. The events logs files are logged in the S3 bucket in the us-west-1 region.
There have been changes in CloudFront, which have caused all traffic to be routed to the origin, resulting in increased latency for users in other continents. After scrutinizing CloudTrail logs, you found that duplicate CloudFront events are being logged. What configuration changes would you perform to eliminate duplicate CloudFront logs? 

Answer options:

A.Using AWS CLI, update CloudTrail trail to disable global service events that are delivered in all regions except US-West-1.
B.Using AWS CLI, change the configuration of a trail to logging a single region instead of logging all regions.
C.Using AWS console, update CloudTrail trail to disable global service events to be delivered in all regions except US-West-1.
D.Using the AWS console, change the configuration of a trail to logging a single region instead of logging all regions.

Correct Answer – A
Amazon CloudFront is a global service for which events are delivered to CloudTrail trails, including global services. To avoid duplicate Amazon CloudFront events, you can disable these events from delivering to CloudTrail trails in all regions & enable them in only one region.
Options B & D is incorrect as if CloudTrail trail is changed to logging a single region. Global service event logging is off automatically. This will disable CloudFront events being logged instead of avoiding duplicate logs.
Option C is incorrect as Changes to Global service event logs can be done only via AWS CLI & not via AWS console.
For more information on Global Service Events with CloudTrail, refer to the following URL-
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-regional-and-global-services