Loading controls...

Control: Log group encryption at rest should be enabled

Description

To help protect sensitive data at rest, ensure encryption is enabled for your Amazon CloudWatch Log Group.

Usage

Run the control in your terminal:

steampipe check terraform_aws_compliance.control.log_group_encryption_at_rest_enabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_aws_compliance.control.log_group_encryption_at_rest_enabled

SQL

This control uses a named query:

log_group_encryption_at_rest_enabled

Tags

category = Compliance

nist_800_53_rev_4 = true

nist_csf = true

plugin = terraform

rbi_cyber_security = true

service = AWS/CloudWatch