Cyral supports a number of log integrations with various SIEM vendors that allow for the shipping of logs from the Cyral sidecar directly to these SIEM vendors.
It’s also possible to deploy sidecars in AWS to push logs to S3. To do that, deploy the sidecar without a SIEM, instead using the native Cloudwatch logging integration. From there, you can export the Cloudwatch log groups to S3.
Further documentation on that can be found here.