Benchmark: Continuous Monitoring (CA-7)

Usage

Browse dashboards and select Continuous Monitoring (CA-7):

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.nist_800_53_rev_4_ca_7

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.nist_800_53_rev_4_ca_7

Controls

• CloudTrail trails should be integrated with CloudWatch logs
• CloudWatch alarm should have an action configured
• EC2 instance detailed monitoring should be enabled
• GuardDuty should be enabled
• RDS DB instance and cluster enhanced monitoring should be enabled
• AWS Security Hub should be enabled for an AWS Account

Tags