<  Back to rules search

CloudTrail global services are enabled

cloudtrail

Classification:

compliance

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

Ensure that an AWS CloudTrail trail has global service events enabled.

Rationale

Easily troubleshoot security issues for global services that aren’t region-specific.

Remediation

Console

By default, trail logs created in the CloudTrail console log global service events. For more information, see the About global service events docs.

CLI

  1. Run aws cloudtrail describe-trails

  2. Run update-trail on any returned trail name above to include-global-service-events.

    update-trail.sh

        aws cloudtrail update-trail
        --name GlobalTrailName
        --include-global-service-events