turbot/aws_compliance
Loading controls...

Control: CloudWatch should not allow cross-account sharing

Description

Ensure that your AWS CloudWatch is configured to allow access only to friendly AWS accounts in order to prevent unauthorized users from sharing their CloudWatch events.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cloudwatch_cross_account_sharing

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cloudwatch_cross_account_sharing --share

SQL

This control uses a named query:

cloudwatch_cross_account_sharing

Tags