Query: S3 buckets object logging should be enabled

Description

Object-Level logging saves events in JSON format in CloudTrail. This is recommended from a security best practice perspective for buckets that contain sensitive data.

Query

Tables used in this query:

• aws_cloudtrail_trail
• aws_s3_bucket

Controls using this query:

• S3 buckets object logging should be enabled

SQL