Skip to main content

💼 3.9 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)

  • Contextual name: 💼 3.9 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)
  • ID: /frameworks/cis-aws-v3.0.0/03/09
  • Located in: 💼 3 Logging

Description​

S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.

Similar​

  • Sections
    • /frameworks/cis-aws-v4.0.0/03/09
    • /frameworks/cis-aws-v2.0.0/03/11
  • Internal
    • ID: dec-c-668ff071

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v2.0.0 → 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)1
💼 CIS AWS v4.0.0 → 💼 3.9 Ensure that object-level logging for read events is enabled for S3 buckets (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS AWS v2.0.0 → 💼 3.11 Ensure that Object-level logging for read events is enabled for S3 bucket - Level 2 (Automated)1
💼 CIS AWS v4.0.0 → 💼 3.9 Ensure that object-level logging for read events is enabled for S3 buckets (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 AWS Account Object-level CloudTrail Logging for Read Events for S3 Buckets is not enabled 🟢1🟢 x6