Loading controls...
Control: Ensure AWS Organizations changes are monitored
Description
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs, and establishing corresponding metric filters and alarms. It is recommended that a metric filter and alarm be established for AWS Organizations changes made in the master AWS Account.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.log_metric_filter_organizationSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.log_metric_filter_organization --shareSQL
This control uses a named query:
log_metric_filter_organization