aws config cloudtrail-security-trail-enabled rule Noncompliant resource

1

My cloudtrail setting like this :

cloudtrail-security-trail-enabledis COMPLIANT if there is at least one trail that meets all of the following:

  • records global service events
  • is a multi-region trail
  • has Log file validation enabled
  • encrypted with a KMS key
  • records events for reads and writes
  • records management events
  • does not exclude any management events

My trail meets all those conditions, but rule is Noncompliant.

What's the problem?

질문됨 일 년 전287회 조회
1개 답변
0

Settings for CloudTrail seems to be correct but "Last file validation delivered" is empty which means this settings is either newly configured or the trail is newly configured.

Did you configure your CloudTrail after you saw the non-compliant results in Config? Please try to "Re-evaluate" this rule OR "Delete results" and "Re-evaluate" on Config end.

AWS
KevinL
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인