Benchmark: CloudWatch Checks
CloudWatch Thrifty Benchmark
Thrifty developers actively manage the retention of their Cloudtrail logs. This benchmark focuses on finding log groups without retention and inactive log-streams.
steampipe check aws_thrifty.benchmark.cloudwatch
- Is retention enabled for your CloudWatch Log Groups?
- Are CloudWatch log streams active? (i.e. written to in last 90 days)