In order to prevent duplicate records in log occurrences for global AWS services such as IAM, STS or Cloudfront, ensure that only one trail in a multi-region logging setup has the 'Include Global Services' function enabled.
Use this to initiate a workflow based on time, events or HTTP calls.
Select resources on which you want to work on.
Custom action node.
Send notification with a custom message.