Control: CloudTrail trails should have insight selectors and logging enabled
Description
CloudTrail Insights provides a powerful way to search and analyze CloudTrail log data using pre-built queries and machine learning algorithms. This can help to identify potential security threats and suspicious activity in near real-time, such as unauthorized access attempts, policy changes, or resource modifications.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cloudtrail_trail_insight_selectors_and_logging_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cloudtrail_trail_insight_selectors_and_logging_enabled --shareSQL
This control uses a named query:
cloudtrail_trail_insight_selectors_and_logging_enabled