Control: Elastic Beanstalk should stream logs to CloudWatch
Description
This control checks whether an Elastic Beanstalk environment is configured to send logs to CloudWatch Logs. The control fails if an Elastic Beanstalk environment isn't configured to send logs to CloudWatch Logs. Optionally, you can provide a custom value for the RetentionInDays parameter if you want the control to pass only if logs are retained for the specified number of days before expiration.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.elastic_beanstalk_environment_logs_to_cloudwatchSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.elastic_beanstalk_environment_logs_to_cloudwatch --shareSQL
This control uses a named query:
elastic_beanstalk_environment_logs_to_cloudwatch