Loading controls...
Benchmark: CloudTrail
Description
This benchmark provides a set of controls that detect Terraform AWS CloudTrail resources deviating from security best practices.
Usage
Browse dashboards and select CloudTrail:
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check terraform_aws_compliance.benchmark.cloudtrailSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.benchmark.cloudtrailControls
- Ensure CloudTrail is enabled in all regions
- CloudTrail trail logs should be encrypted with KMS CMK
- CloudTrail trail log file validation should be enabled