Loading controls...
Control: Ensure a log metric filter and alarm exist for VPC changes
Description
You can do real-time monitoring of API calls by directing CloudTrail logs to CloudWatch Logs and establishing corresponding metric filters and alarms. You can have more than one VPC in an account, and you can create a peer connection between two VPCs, enabling network traffic to route between VPCs. Security Hub recommends that you create a metric filter and alarm for changes to VPCs.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.log_metric_filter_vpc
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.log_metric_filter_vpc --share
SQL
This control uses a named query:
log_metric_filter_vpc