Benchmark: Audit and Accountability (AU)
Description
The AU control family consists of security controls related to an organization’s audit capabilities. This includes audit policies and procedures, audit logging, audit report generation, and protection of audit information.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Audit and Accountability (AU).
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_au
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_au --share
Benchmarks
- Event Logging (AU-2)
- Content of Audit Records (AU-3)
- Audit Log Stprage Capacity (AU-4)
- Audit Record Review, Analysis And Reporting (AU-6)
- Audit Record Reduction And Report Generation (AU-7)
- Time Stamps (AU-8)
- Protection of Audit Information (AU-9)
- Non-Repudiation (AU-10)
- Audit Record Retention (AU-11)
- Audit Record Generation (AU-12)
- Session Audit (AU-14)
- Cross-Organizational Audit Logging (AU-16)