turbot/aws_compliance

Control: CodeBuild projects should have logging enabled

Description

This control checks if an AWS CodeBuild project environment has at least one log option enabled. The rule is non-compliant if the status of all present log configurations is set to 'DISABLED'.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.codebuild_project_logging_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.codebuild_project_logging_enabled --share

SQL

This control uses a named query:

codebuild_project_logging_enabled

Tags