Query: 2.22 Ensure a log monitoring and alerts are set up for security group changes

Description

Real-time monitoring of API calls can be achieved by directing ActionTrail Logs to Log Service and establishing corresponding query and alarms. Security Groups are a stateful packet filter that controls ingress and egress traffic within a VPC. It is recommended that query and alarm be established changes to Security Groups.

Query

Tables used in this query:

• alicloud_action_trail
• alicloud_sls_alert

Controls using this query:

• 2.22 Ensure a log monitoring and alerts are set up for security group changes

SQL