turbot/ibm_compliance

Control: 3.2 Ensure that archiving is enabled for audit events

Description

Archive events for long-term storage so that you have access to data for a longer period of time, you can comply with highly regulated environments, you can recover quickly in the eventuality of a disaster scenario, and you can adhere to internal data storage policies.

Remediation

IBM Cloud Activity Tracker with LogDNA does not backup your data. You are responsible for archiving your events. When you enable archiving of your data, you are responsible for checking that your archived files are not corrupted, and the maintenance of your archived files.

Usage

Run the control in your terminal:

powerpipe control run ibm_compliance.control.cis_v100_3_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run ibm_compliance.control.cis_v100_3_2 --share

SQL

This control uses a named query:

manual_control

Tags