Ultimate access to all questions.
A company uses AWS Organizations to manage multiple AWS accounts. The security team has observed that some member accounts are not forwarding AWS CloudTrail logs to a central Amazon S3 bucket. To enforce logging across all accounts, both existing and future ones, what actions should the security team take?