Policy: AWS > CIS v3.0 > 4 - Monitoring > 4.01 - Ensure unauthorized API calls are monitored
Configures auditing against a CIS Benchmark item.
Level: 2
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs, or an external Security information and event management (SIEM) environment, and establishing corresponding metric filters and alarms.
It is recommended that a metric filter and alarm be established for unauthorized API calls.
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Controls
- AWS > CIS v3.0
- AWS > CIS v3.0 > 4 - Monitoring > 4.01 - Ensure unauthorized API calls are monitored
- AWS > CIS v3.0 > 4 - Monitoring
Policy Specification
Schema Type |
|
---|---|
Default |
|
Valid Values [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/cis#/control/categories/v070605
- tmod:@turbot/aws-cisv3-0#/policy/types/r0401
- turbot graphql policy-type --id "tmod:@turbot/aws-cisv3-0#/policy/types/r0401"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-cisv3-0#/policy/types/r0401"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI