Skip to main content

💼 AU-6(4) Central Review and Analysis (H)

  • ID: /frameworks/fedramp-high-security-controls/au/06/04

Description​

Provide and implement the capability to centrally review and analyze audit records from multiple components within the system.

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/au/06/04
  • Internal
    • ID: dec-c-cb34bb9f

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST SP 800-53 Revision 5 → 💼 AU-6(4) Audit Record Review, Analysis, and Reporting _ Central Review and Analysis13no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (13)​

PolicyLogic CountFlagsCompliance
🛡️ AWS Account Multi-Region CloudTrail is not enabled🟢1🟢 x6no data
🛡️ AWS API Gateway API Access Logging in CloudWatch is not enabled🟢1🟠 x1, 🟢 x5no data
🛡️ AWS API Gateway API Execution Logging in CloudWatch is not enabled🟢1🟢 x6no data
🛡️ AWS CloudFront Distribution Logging is not enabled🟢1🟢 x6no data
🛡️ AWS CloudTrail S3 Bucket Access Logging is not enabled.🟢1🟢 x6no data
🛡️ AWS DMS Migration Task Logging is not enabled🟢1🟢 x6no data
🛡️ AWS ECS Task Definition logging is not configured🟢1🟢 x6no data
🛡️ AWS EKS Cluster Logging is not enabled for all control plane logs types🟢1🟢 x6no data
🛡️ AWS ELB Load Balancer Access Logging is disabled🟢1🟢 x6no data
🛡️ AWS OpenSearch Domain audit logging is not enabled🟢1🟢 x6no data
🛡️ AWS OpenSearch Domain error logging is not enabled🟢1🟢 x6no data
🛡️ AWS S3 Bucket Server Access Logging is not enabled🟢1🟢 x6no data
🛡️ AWS VPC Flow Logs are not enabled🟢1🟠 x1, 🟢 x5no data