Skip to main content

cinq-auditor-cloudtrail

Please open issues in the Cloud-Inquisitor repository

Description

This auditor ensures that CloudTrail:

  • is enabled globally on multi-region

  • logs to a central location

  • has SNS/SQS notifications enabled and being sent to the correct queues

  • and that regional trails (of our chosen name) are not enabled

Configuration Options

Option name

Default Value

Type

Description

enabled

False

bool

Enable the CloudTrail auditor

interval

60

int

Run frequency in minutes

bucket_account

CHANGE ME

string

Name of the account (must exist), in which to create the S3 bucket where CloudTrail logs will be delivered

bucket_name

CHANGE ME

string

Name of the S3 bucket to send CloudTrail logs to

bucket_region

us-west-2

string

Region where to enable global events logging

global_cloudtrail_region

us-west-2

string

Region where to enable the global CloudTrail

sns_topic_name

CHANGE ME

string

Name of the SNS topic for CloudTrail log delivery

sqs_queue_account

CHANGE ME

string

Name of the account (must exist) which owns the SQS queue for CloudTrail log delivery notifications

sqs_queue_name

SET ME

string

Name of the SQS queue

sqs_queue_region

us-west-2

string

Region for the SQS queue

trail_name

us-west-2

string

Name of the CloudTrail trail region

Metadata

Release files for cinq-auditor-cloudtrail 2.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cinq-auditor-cloudtrail 2.1.0
File Size Uploaded Provenance
cinq-auditor-cloudtrail-2.1.0.tar.gz 6.9 kB Without provenance Details

Release files / cinq-auditor-cloudtrail-2.1.0.tar.gz

Download URL cinq-auditor-cloudtrail-2.1.0.tar.gz
Size 6.9 kB
Tags Source
SHA-256 checksum
How to use checksums
16a0d0a984fcccdd760610ed096941e6735ba91dbb2fe97d92fbb797301fa66f
BLAKE2b-256 checksum
How to use checksums
1a02f9cd70bd8c921a77af52a7919c6c47789891541e596295396a592c43dd9b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via Python-urllib/3.6

Security for cinq-auditor-cloudtrail 2.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page