💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)

• Contextual name: 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)
• ID: /frameworks/cis-aws-v2.0.0/03/11
• Located in: 💼 3 Logging

Description

S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.

Similar

• Sections
  • /frameworks/cis-aws-v3.0.0/03/09
  • /frameworks/cis-aws-v1.5.0/03/11
• Internal
  • ID: dec-c-e0768fd4

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CIS AWS v1.5.0 → 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)			1
💼 CIS AWS v3.0.0 → 💼 3.9 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)			1

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CIS AWS v1.5.0 → 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)			1
💼 CIS AWS v3.0.0 → 💼 3.9 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)			1

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (1)

Policy	Logic Count	Flags
📝 AWS Account Object-level CloudTrail Logging for Read Events for S3 Buckets is not enabled 🟢	1	🟢 x6