Benchmark: CloudWatch

Usage

Browse dashboards and select CloudWatch:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check terraform_aws_compliance.benchmark.cloudwatch

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_aws_compliance.benchmark.cloudwatch

Controls

• CloudWatch alarm action should be enabled
• Ensure CloudWatch Logs destination policy has no wildcards
• Log group retention period should be at least 365 days
• Log group encryption at rest should be enabled

Tags