💼 [SSM.6] SSM Automation should have CloudWatch logging enabled

• ID: /frameworks/aws-fsbp-v1.0.0/ssm/06

Description

SSM Automation is an AWS Systems Manager tool that helps you build automated solutions to deploy, configure, and manage AWS resources at scale using predefined or custom runbooks. To meet operational or security requirements for your organization, you might need to provide a record of the scripts that it runs. You can configure SSM Automation to send the output from aws:executeScript actions in your runbooks to an Amazon CloudWatch Logs log group that you specify. With CloudWatch Logs, you can monitor, store, and access log files from various AWS services.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/ssm-controls.html#ssm-6

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance