Policy Packs
AWS CIS v3.0.0 - Section 3 - Logging

Variables

The AWS CIS v3.0.0 - Section 3 - Logging policy pack has 2 variables:

NameTypeDefaultDescription
kms_key_aliasstringalias/turbot/defaultThe alias of the KMS key that encrypts the logs delivered by CloudTrail. To be used for control 3.1.
logging_bucketstringThe name of an S3 bucket to which the CloudTrail will deliver the logs. To be used for controls 3.1 and 3.4.