Query: CloudWatch should not allow cross-account sharing

Description

Ensure that your AWS CloudWatch is configured to allow access only to friendly AWS accounts in order to prevent unauthorized users from sharing their CloudWatch events.

Query

Tables used in this query:

• aws_account
• aws_iam_role

Controls using this query:

• CloudWatch should not allow cross-account sharing

SQL