<  Back to rules search

CloudTrail global services are enabled

cloudtrail
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Ensure that an AWS CloudTrail trail has global service events enabled.

Rationale

Easily troubleshoot security issues for global services that aren’t region-specific.

Remediation

From the console

By default, trail logs created in the CloudTrail console log global service events. For more information, see the About global service events docs.

From the command line

  1. Run aws cloudtrail describe-trails

  2. Run update-trail on any returned trail name above to include-global-service-events.

    update-trail.sh

        aws cloudtrail update-trail
            --name GlobalTrailName
            --include-global-service-events