Query: CloudTrail trail S3 buckets MFA delete should be enabled

Description

Ensure that CloudTrail trail S3 buckets should have MFA delete enabled. MFA delete helps prevent accidental bucket deletions by requiring the user who initiates the delete action to prove physical possession of an MFA device with an MFA code and adding an extra layer of friction and security to the delete action.

Query

Tables used in this query:

• aws_cloudtrail_trail
• aws_s3_bucket

Controls using this query:

• CloudTrail trail S3 buckets MFA delete should be enabled

SQL