CloudTrail auditor
Project description
Please open issues in the Cloud-Inquisitor repository
Description
This auditor ensures that CloudTrail:
- is enabled globally on multi-region
- logs to a central location
- has SNS/SQS notifications enabled and being sent to the correct queues
- and that regional trails (of our chosen name) are not enabled
Configuration Options
Option name | Default Value | Type | Description |
---|---|---|---|
enabled | False | bool | Enable the CloudTrail auditor |
interval | 60 | int | Run frequency in minutes |
bucket_account | CHANGE ME | string | Name of the account (must exist), in which to create the S3 bucket where CloudTrail logs will be delivered |
bucket_name | CHANGE ME | string | Name of the S3 bucket to send CloudTrail logs to |
bucket_region | us-west-2 | string | Region where to enable global events logging |
global_cloudtrail_region | us-west-2 | string | Region where to enable the global CloudTrail |
sns_topic_name | CHANGE ME | string | Name of the SNS topic for CloudTrail log delivery |
sqs_queue_account | CHANGE ME | string | Name of the account (must exist) which owns the SQS queue for CloudTrail log delivery notifications |
sqs_queue_name | SET ME | string | Name of the SQS queue |
sqs_queue_region | us-west-2 | string | Region for the SQS queue |
trail_name | us-west-2 | string | Name of the CloudTrail trail region |
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Close
Hashes for cinq-auditor-cloudtrail-2.1.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 16a0d0a984fcccdd760610ed096941e6735ba91dbb2fe97d92fbb797301fa66f |
|
MD5 | e5d6071613d730c9cd5219e8d8ba3537 |
|
BLAKE2-256 | 1a02f9cd70bd8c921a77af52a7919c6c47789891541e596295396a592c43dd9b |