Cyral supports a number of log integrations with various SIEM vendors that allow for the shipping of logs from the Cyral sidecar directly to these SIEM vendors.
It’s also possible to deploy sidecars in AWS to push logs to S3. To do that, deploy the sidecar without a SIEM, instead using the native Cloudwatch logging integration. From there, you can export the Cloudwatch log groups to S3.
Further details can be found in the AWS documentation.