AWS Misconfigurations
CloudTrail Audit
AWS Misconfigurations
CloudTrail Audit
Checks Performed
- CloudTrail Must Log Data Events
- Log files Should Be Delivered Without Any Failures
- CloudTrail Must Be Enabled For All Regions
- Trails Should Record Both Regional And Global Events
- Duplicate Entries Should Be Avoided In CloudTrail Logs
- CloudTrail Events Should Be Monitored By CloudWatch Logs
- File Integrity Validation Feature Should Be Enabled For Trails
- CloudTrail Logs Should Be Encrypted
- CloudTrails Must Log Management Events
- CloudTrail Logging Bucket Should Use MFA Delete Feature
- Object Lock Feature Should Be Enabled
- CloudTrail Logging Buckets Should Not Be Publicly Accessible
- Server Access Logging Feature Should Be Enabled
- CloudTrails Must Log Management Events