Control: CloudWatch should not allow cross-account sharing
Description
Ensure that your AWS CloudWatch is configured to allow access only to friendly AWS accounts in order to prevent unauthorized users from sharing their CloudWatch events.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cloudwatch_cross_account_sharingSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cloudwatch_cross_account_sharing --shareSQL
This control uses a named query:
cloudwatch_cross_account_sharing