💼 4.12 Ensure changes to network gateways are monitored (Manual)
- Contextual name: 💼 4.12 Ensure changes to network gateways are monitored (Manual)
- ID:
/frameworks/cis-aws-v4.0.0/04/12
- Located in: 💼 4 Monitoring
Description
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to
CloudWatch Logs or an external Security Information and Event Management (SIEM)
environment, and establishing corresponding metric filters and alarms.
Network gateways are required to send and receive traffic to a destination outside of a
VPC. It is recommended that a metric filter and alarm be established for changes to
network gateways.
Similar
- Sections
/frameworks/cis-aws-v4.0.1/04/12/frameworks/cis-aws-v3.0.0/04/12
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (1)