sending cloudtrails to S3 bucket in different vpc account

Question

i got aws 5 accounts in same vpc. 
got 6th aws account in different vpc.
i need to send cloudtrails from all 5 accounts to a S3 bucket in completely different aws account (6th account/different vpc)

i got 2*ideas :

first idea: 
collect cloud trails from 1,2,3,4,5 aws accounts and send it to s3 bucket in 1st aws account ..
and do s3 replication to the 6th aws account which is in different vpc. 
if i do this way - do i need vpc peering ??

second idea: 
collect cloud trails from 1,2,3,4,5 aws accounts and send it directly to s3 bucket in 6th aws account ..
can this be done ??

or any other better option ? or which is the best among my 2 ideas ?

Answer

This is certainly possible, and the steps to implement it are here https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html

Just a note around your terminology - buckets don't exist in VPCs and are not tied to a particular VPC. You may access an S3 bucket through a particular VPC endpoint, but that doesn't mean the bucket is only accessible through that method.

But yes, back to your main point, you can certainly setup CloudTrail to send logs from accounts #1, #2, #3, #4 & #5 into a bucket owner by account #6.

Answer

the link you sent shows my second idea.. 
so it looks like i dont need to care about my vpc peeering.  its about bucket policy on destination.

just generally , why second idea better than first idea ?

sending cloudtrails to S3 bucket in different vpc account

Relevant content