💼 3 Logging

• Contextual name: 💼 3 Logging
• ID: /frameworks/cis-aws-v4.0.1/03
• Located in: 💼 CIS AWS v4.0.1

Description

This section contains recommendations for configuring AWS logging features.

Similar

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 3.1 Ensure CloudTrail is enabled in all regions (Automated)			1
💼 3.2 Ensure CloudTrail log file validation is enabled (Automated)			1
💼 3.3 Ensure AWS Config is enabled in all regions (Automated)			1
💼 3.4 Ensure that server access logging is enabled on the CloudTrail S3 bucket (Automated)			1
💼 3.5 Ensure CloudTrail logs are encrypted at rest using KMS CMKs (Automated)			1
💼 3.6 Ensure rotation for customer-created symmetric CMKs is enabled (Automated)			1
💼 3.7 Ensure VPC flow logging is enabled in all VPCs (Automated)			1
💼 3.8 Ensure that object-level logging for write events is enabled for S3 buckets (Automated)			1
💼 3.9 Ensure that object-level logging for read events is enabled for S3 buckets (Automated)			1