turbot/aws_compliance

Control: CloudTrail trail S3 buckets MFA delete should be enabled

Description

Ensure that CloudTrail trail S3 buckets should have MFA delete enabled. MFA delete helps prevent accidental bucket deletions by requiring the user who initiates the delete action to prove physical possession of an MFA device with an MFA code and adding an extra layer of friction and security to the delete action.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cloudtrail_trail_bucket_mfa_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cloudtrail_trail_bucket_mfa_enabled --share

SQL

This control uses a named query:

cloudtrail_trail_bucket_mfa_enabled

Tags