Benchmark: Continuous Monitoring (CA-7)

Usage

Browse dashboards and select Continuous Monitoring (CA-7):

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.fedramp_low_rev_4_ca_7

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.fedramp_low_rev_4_ca_7

Controls

• Auto Scaling groups with a load balancer should use health checks
• At least one multi-region AWS CloudTrail should be present in an account
• All S3 buckets should log S3 data events in CloudTrail
• At least one enabled trail should be present in a region
• CloudWatch alarm action should be enabled
• EC2 instance detailed monitoring should be enabled
• Elastic Beanstalk enhanced health reporting should be enabled
• ELB application load balancers should have Web Application Firewall (WAF) enabled
• GuardDuty should be enabled
• Lambda functions concurrent execution limit configured
• Lambda functions should be configured with a dead-letter queue
• RDS DB instance and cluster enhanced monitoring should be enabled
• Redshift cluster audit logging and encryption should be enabled
• AWS Security Hub should be enabled for an AWS Account

Tags