# Getting Cloudtrail Cloudwatch Events Working

**URL:** <https://forum.serverless.com/t/getting-cloudtrail-cloudwatch-events-working/4642>\
**Category:** Serverless Framework\
**Created:** [June 2, 2018, 3:46am UTC](https://forum.serverless.com/t/getting-cloudtrail-cloudwatch-events-working/4642 "2018-06-02T03:46:09Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jseiser](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@jseiser](https://forum.serverless.com/u/jseiser)\
**Post date:** [June 2, 2018, 3:46am UTC](https://forum.serverless.com/t/getting-cloudtrail-cloudwatch-events-working/4642/1 "2018-06-02T03:46:09Z")

</div>

Im attempting to process cloudwatch events, specifically cloudtrail ones since I am deploying into us-east-1 but would like to get events from all regions. Everything deploys, but the events are not triggering the lambda.

My cloudtrail is configured for all regions and delivering to a Cloudwatch Log Group.

functions:  
ec2\_instance\_region\_watch:  
handler: ec2\_instance\_region\_watch.ec2\_instance\_region\_watch  
events:  
- cloudwatchEvent:  
event:  
source:  
- “[ec2.amazonaws.com](http://ec2.amazonaws.com)”  
detail-type:  
- “AWS API Call via CloudTrail”  
detail:  
eventName:  
- “RunInstances”

My cloudwatch event is created.

{  
“detail-type”: [  
“AWS API Call via CloudTrail”  
],  
“source”: [  
“[ec2.amazonaws.com](http://ec2.amazonaws.com)”  
],  
“detail”: {  
“eventName”: [  
“RunInstances”  
]  
}  
}

I launch an instance, and in the cloudwatch log group I get an event that contains what I expect.

```
"eventSource": "ec2.amazonaws.com",
"eventName": "RunInstances",

```

but the lambda is never triggered. I was trying to somewhat dupe this, [https://serverless.com/blog/serverless-cloudtrail-cloudwatch-events/](https://serverless.com/blog/serverless-cloudtrail-cloudwatch-events/)