CloudTrail trail file integration validation is not enabled

Classification:

compliance

Set up the cloudtrail integration.

Overview

Description

Ensure that an AWS CloudTrail trail has file integration validation enabled.

Rationale

AWS CloudTrail file integration validation can verify whether files were modified or changed once delivered to an S3 bucket.

Remediation

1. Run aws cloudtrail describe-trails

2. Run update-trail on any returned trail name above to enable-log-file-validation.

   update-trail.sh

   Copy

       aws cloudtrail update-trail
           --name GlobalTrailName
           --enable-log-file-validation