Policy Packs

guardrails-samples

Ensure that all actions taken within your AWS environment are consistently logged, enhancing security monitoring, supporting incident response, and ensuring compliance with regulatory requirements.

Enable Multi-Region CloudTrail Trails for AWS Accounts

main

aws_turbot_audit_trail

Configure the Turbot CloudTrail stack.&#92;n&#92;nThe Guardrails Audit Trail provides a mechanism for configuring a CloudTrail to&#92;nrecord an audit trail of API calls to your AWS accounts.&#92;n

auditTrail

AWS > Turbot > Audit Trail

aws_turbot_audit_trail_cloudtrail_trail_enabled

The desired state of the CloudTrail.  When disabled, a CloudTrail does not log&#92;nany events&#92;n&#92;nThe Guardrails Audit Trail provides a mechanism for configuring a CloudTrail to&#92;nrecord an audit trail of API calls to your AWS accounts.&#92;n

trailEnabled

AWS > Turbot > Audit Trail > CloudTrail > Trail > Enabled

aws_turbot_audit_trail_cloudtrail_trail_global_region

The region in that will host the Guardrails Trail when configured to use a&#92;nmulti-region trail.&#92;n&#92;nThe Guardrails Audit Trail provides a mechanism for configuring a CloudTrail to&#92;nrecord an audit trail of API calls to your AWS accounts.&#92;n

trailGlobalRegion

AWS > Turbot > Audit Trail > CloudTrail > Trail > Global Region

aws_turbot_audit_trail_cloudtrail_trail_s3_bucket

The name of an S3 bucket to which the Guardrails Trail will be delivered.&#92;n&#92;nCloudTrail must write to S3, thus this policy is required.  The S3 bucket&#92;nmust already exist (the stack will not create it) and the CloudTrail&#92;nservice must be allowed write access. The bucket can reside in any&#92;nregion of any account.&#92;n

trailBucket

AWS > Turbot > Audit Trail > CloudTrail > Trail > S3 Bucket

turbot_policy_setting.aws_turbot_audit_trail

turbot_policy_setting.aws_turbot_audit_trail_cloudtrail_trail_enabled

turbot_policy_setting.aws_turbot_audit_trail_cloudtrail_trail_global_region

turbot_policy_setting.aws_turbot_audit_trail_cloudtrail_trail_s3_bucket

Policy	Setting	Note
AWS > Turbot > Audit Trail	Check: Configured
AWS > Turbot > Audit Trail > CloudTrail > Trail > Enabled	Enabled
AWS > Turbot > Audit Trail > CloudTrail > Trail > Global Region	us-east-1
AWS > Turbot > Audit Trail > CloudTrail > Trail > S3 Bucket	mybucket

Policy Settings