ActionTrail does not export all logs
ActionTrail is a web service that monitors and records actions performed on your cloud through cloud console, API calls, and...
Blog
WAF domain without log service enabled
Web Application Firewall (WAF) provides end-to-end security protection for your websites or apps. WAF effectively identifies and filters out malicious...
CloudTrail doesn’t have at least one multi-Region trail without management events exclusions
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. Visibility into...
CloudTrail bucket is publicly accessible
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail,...
CloudTrail bucket MFA delete is disabled
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail,...
S3 Bucket Object-Level Logging for Write Events is Disabled
S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log...
Cloudtrail Not Delivering Logs to CloudWatch
AWS CloudTrail is a web service that records AWS API calls made in a given AWS account. CloudTrail uses Amazon...
Ensure CloudTrail log file validation is enabled
CloudTrail log file validation creates a digitally signed digest file containing a hash of each log that CloudTrail writes to...
An RDS event subscription for critical security group events does not exist
RDS event subscription resource allows you to receive notifications for RDS events through an Amazon Simple Notification Service (SNS). RDS...