Ensure CloudTrail log file validation is enabled
CloudTrail log file validation creates a digitally signed digest file containing a hash of each log that CloudTrail writes to...
Blog
An RDS event subscription for critical security group events does not exist
RDS event subscription resource allows you to receive notifications for RDS events through an Amazon Simple Notification Service (SNS). RDS...
An RDS event subscription for critical cluster events does not exist
RDS event subscription resource allows you to receive notifications for RDS events through an Amazon Simple Notification Service (SNS). RDS...
ACK cluster with log service disabled
Alibaba Cloud Container Service for Kubernetes (ACK) is a managed service compatible with Kubernetes to help users manage their containerized...
Logs Container Publicly Accessible
Ensure the storage container storing the activity logs is not publicly accessible
Storage Bucket Logging is Disabled
GCP Storage Buckets are containers that store data. Storage Bucket {GcpStorageBucket} does not have bucket logging enabled. Storage buckets offer...
Lambda function with disabled tracing
The function {AwsLambdaFunction} is not configured to enable tracing
Key Vault actions not logged
Monitoring how and when key vaults are accessed, and by whom enables an audit trail of interactions with confidential information,...
No monitoring for Audit Configuration changes
Configuring the metric filter and alerts for audit configuration changes ensures the recommended state of audit configuration is maintained so...