💼 3.8 Ensure that Object-level logging for write events is enabled for S3 bucket - Level 2 (Automated)
- ID:
/frameworks/cis-aws-v3.0.0/03/08
Description
S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.
Similar
- Sections
/frameworks/cis-aws-v4.0.0/03/08/frameworks/cis-aws-v2.0.0/03/10
- Internal
- ID:
dec-c-ad3bbe5d
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CIS AWS v2.0.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket - Level 2 (Automated) | 1 | no data | |||
| 💼 CIS AWS v4.0.0 → 💼 3.8 Ensure that object-level logging for write events is enabled for S3 buckets (Automated) | 1 | no data |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CIS AWS v2.0.0 → 💼 3.10 Ensure that Object-level logging for write events is enabled for S3 bucket - Level 2 (Automated) | 1 | no data | |||
| 💼 CIS AWS v4.0.0 → 💼 3.8 Ensure that object-level logging for write events is enabled for S3 buckets (Automated) | 1 | no data |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ AWS Account Object-level CloudTrail Logging for Write Events for S3 Buckets is not enabled🟢 | 1 | 🟢 x6 | no data |