Description

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. We identified CloudTrail logging is not enabled in the account {CloudAccount}.

• 

  Recommended Mitigation

  In order to enhance the visibility of API calls in the account, CloudTrail logging should be enabled. more details can be found in https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-getting-started.html