💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)
- Contextual name: 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)
- ID:
/frameworks/cis-aws-v2.0.0/03/11
- Located in: 💼 3 Logging
Description
S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.
Similar
- Sections
/frameworks/cis-aws-v3.0.0/03/09/frameworks/cis-aws-v1.5.0/03/11
- Internal
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (1)