Policy: AWS > CIS v3.0 > 4 - Monitoring > 4.02 - Ensure management console sign-in without MFA is monitored
Configures auditing against a CIS Benchmark item.
Level: 1
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs, or an external Security information and event management (SIEM) environment, and establishing corresponding metric filters and alarms.
It is recommended that a metric filter and alarm be established for console logins that are not protected by multi-factor authentication (MFA).
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Controls
- AWS > CIS v3.0
- AWS > CIS v3.0 > 4 - Monitoring > 4.02 - Ensure management console sign-in without MFA is monitored
- AWS > CIS v3.0 > 4 - Monitoring
Policy Specification
Schema Type |
|
---|---|
Default |
|
Valid Values [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/cis#/control/categories/v0716
- tmod:@turbot/aws-cisv3-0#/policy/types/r0402
- turbot graphql policy-type --id "tmod:@turbot/aws-cisv3-0#/policy/types/r0402"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-cisv3-0#/policy/types/r0402"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI