Skip to main content

💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket

  • Contextual name: 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket
  • ID: /frameworks/cis-aws-v1.4.0/03/10
  • Located in: 💼 3 Logging

Description​

S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.

Similar​

  • Sections
    • /frameworks/cis-aws-v1.5.0/03/10
    • /frameworks/cis-aws-v1.3.0/03/10
  • Internal
    • ID: dec-c-c49d79d0

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v1.3.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket1
💼 CIS AWS v1.5.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket - Level 2 (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v1.3.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket1
💼 CIS AWS v1.5.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket - Level 2 (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 AWS Account Object-level CloudTrail Logging for Write Events for S3 Buckets is not enabled 🟢1🟢 x6