Control: S3 buckets object logging should be enabled
Description
Object-Level logging saves events in JSON format in CloudTrail. This is recommended from a security best practice perspective for buckets that contain sensitive data.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.s3_bucket_object_logging_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.s3_bucket_object_logging_enabled --shareSQL
This control uses a named query:
s3_bucket_object_logging_enabled