It just got a lot simpler - S3 now delivers events directly to EventBridge so you can cut out the CloudTrail middleman - https://aws.amazon.com/blogs/aws/new-use-amazon-s3-event-notifications-with-amazon-eventbridge/