⭐ Repository → 💼 CIS AWS v6.0.0 → 💼 4 Logging
💼 4.2 Ensure CloudTrail log file validation is enabled (Automated)
- ID:
/frameworks/cis-aws-v6.0.0/04/02
Description
CloudTrail log file validation creates a digitally signed digest file containing a hash of each log that CloudTrail writes to S3. These digest files can be used to determine whether a log file was changed, deleted, or remained unchanged after CloudTrail delivered the log. It is recommended that file validation be enabled for all CloudTrails.
Similar
- Sections
/frameworks/cis-aws-v5.0.0/03/02
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)