Homepage

CloudTrail is not enabled for all regions Affecting CloudTrail service in AWS

Severity

0.0
medium
0
10
Severity Framework
Snyk CCSS
Rule category
Logging/ Access

Is your environment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
Frameworks
AWS-Well-ArchitectedCIS-AWSCIS-ControlsHIPAAISO-27001NIST-800-53PCI-DSSSOC-2
  • Snyk IDSNYK-CC-00192
  • creditSnyk Research Team
Report a new misconfiguration Found a mistake?

Description

The AWS API call history produced by CloudTrail enables security analysis, resource change tracking, and compliance auditing.

How to fix?

Set the is_multi_region_trail attribute to true.

Example Configuration

resource "aws_cloudtrail" "allowed" {
  name                  = "tf-trail-biz-baz"
  s3_bucket_name        = "${aws_s3_bucket.ct_bucket.id}"
  s3_key_prefix         = "prefix"
  is_multi_region_trail = true
}