Home
Security Hardening
CIS Amazon Web Services Foundations L2.1 4.0

CIS Amazon Web Services Foundations L2.1 4.0

Ensure a log metric filter and alarm exist for changes to Network Access Control Lists (NACL) – ‘subscription exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘alarm exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for security group changes – ‘metric filter exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for security group changes – ‘subscription exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘metric filter exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘subscription exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure a log metric filter and alarm exist for security group changes – ‘alarm exists’
Details Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric...
Ensure AWS Config is enabled in all regions – ‘Include global resources’
Details AWS Config is a web service that performs configuration management of supported AWS resources within your account and delivers...
Ensure AWS Config is enabled in all regions – ‘Record all resources supported in this region’
Details AWS Config is a web service that performs configuration management of supported AWS resources within your account and delivers...
Ensure AWS Config is enabled in all regions – ‘Review defined S3 Bucket’
Details AWS Config is a web service that performs configuration management of supported AWS resources within your account and delivers...

Prev Next

CIS Amazon Web Services Foundations L2.1 4.0

Ensure a log metric filter and alarm exist for changes to Network Access Control Lists (NACL) – ‘subscription exists’

Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘alarm exists’

Ensure a log metric filter and alarm exist for security group changes – ‘metric filter exists’

Ensure a log metric filter and alarm exist for security group changes – ‘subscription exists’

Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘metric filter exists’

Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs – ‘subscription exists’

Ensure a log metric filter and alarm exist for security group changes – ‘alarm exists’

Ensure AWS Config is enabled in all regions – ‘Include global resources’

Ensure AWS Config is enabled in all regions – ‘Record all resources supported in this region’

Ensure AWS Config is enabled in all regions – ‘Review defined S3 Bucket’