CloudTrail multi-region is not enabled

Classification:

compliance

Set up the cloudtrail integration.

Overview

Description

Ensure that AWS CloudTrail is enabled.

Rationale

AWS CloudTrail enables you to configure regions from one location to maintain infrastructure security.

Remediation

1. Run aws cloudtrail describe-trails

2. Run update-trail on any returned trail name above to enable multi-region-trail.

   update-trail.sh

   Copy

       aws cloudtrail update-trail
           --name GlobalTrailName
           --is-multi-region-trail