💼 4.5 Ensure CloudTrail configuration changes are monitored (Manual)
- Contextual name: 💼 4.5 Ensure CloudTrail configuration changes are monitored (Manual)
- ID:
/frameworks/cis-aws-v4.0.0/04/05
- Located in: 💼 4 Monitoring
Description
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to
CloudWatch Logs or an external Security Information and Event Management (SIEM)
environment, and establishing corresponding metric filters and alarms.
It is recommended that a metric filter and alarm be used to detect changes to
CloudTrail's configurations.
Similar
- Sections
/frameworks/cis-aws-v4.0.1/04/05/frameworks/cis-aws-v3.0.0/04/05
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (1)