Logging All S3 Object Events By Using Basic Event Selectors

resource "aws_cloudtrail" "example" {
 # ... other configuration ...

 event_selector {
   read_write_type           = "All"
   include_management_events = true

   data_resource {
     type   = "AWS::S3::Object"
     values = ["arn:aws:s3"]
   }
 }
}

Terraform aws_cloudtrail resource Terraform Cloudtrail: aws_cloudtrail, module