multi-region-cloudtrail-enabled
Checks that there is at least one multi-region AWS CloudTrail. The rule is non-compliant if the trails do not match input parameters
Identifier: MULTI_REGION_CLOUD_TRAIL_ENABLED
Trigger type: Periodic
AWS Region: All supported AWS regions
Parameters:
- s3BucketName (Optional)
- Type: String
-
Name of Amazon S3 bucket for AWS CloudTrail to deliver log files to.
- snsTopicArn (Optional)
- Type: String
-
Amazon SNS topic ARN for AWS CloudTrail to use for notifications.
- cloudWatchLogsLogGroupArn (Optional)
- Type: String
-
Amazon CloudWatch log group ARN for AWS CloudTrail to send data to.
- includeManagementEvents (Optional)
- Type: boolean
-
Event selector to include management events for the AWS CloudTrail.
- readWriteType (Optional)
- Type: String
-
Type of events to record. Valid values are ReadOnly, WriteOnly and ALL.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
