Loading controls...
Control: Ensure a log metric filter and alarm exist for route table changes
Description
You can do real-time monitoring of API calls by directing CloudTrail logs to CloudWatch Logs and establishing corresponding metric filters and alarms. Routing tables route network traffic between subnets and to network gateways. Security Hub recommends that you create a metric filter and alarm for changes to route tables. Monitoring these changes helps ensure that all VPC traffic flows through an expected path.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.log_metric_filter_route_table
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.log_metric_filter_route_table --share
SQL
This control uses a named query:
log_metric_filter_route_table