Query: Ensure that Object-level logging for read events is enabled for S3 bucket

Description

This rule enables object-level logging for read events for S3 buckets. Object-level logging for read events helps in identifying the requestor who performed the read operation on the S3 bucket objects.

Query

Tables used in this query:

• aws_cloudtrail_trail
• aws_s3_bucket

Controls using this query:

• 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket
• 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket
• 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket
• 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket
• 3.9 Ensure that Object-level logging for read events is enabled for S3 bucket
• 3.9 Ensure that Object-level logging for read events is enabled for S3 buckets
• Ensure that Object-level logging for read events is enabled for S3 bucket

SQL