| CARVIEW |
cloudtrail-s3-dataevents-enabled
Checks if at least one AWS CloudTrail trail is logging Amazon Simple Storage Service (Amazon S3) data events for all S3 buckets. The rule is NON_COMPLIANT if there are trails or if no trails record S3 data events.
Identifier: CLOUDTRAIL_S3_DATAEVENTS_ENABLED
Trigger type: Periodic
AWS Region: All supported AWS regions except Asia Pacific (Taipei) Region
Parameters:
- S3BucketNames (Optional)
- Type: String
-
Comma-separated list of S3 bucket names for which data events logging should be enabled. Default behavior checks for all S3 buckets.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
Thanks for letting us know this page needs work. We're sorry we let you down.
If you've got a moment, please tell us how we can make the documentation better.