Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
cloud-trail-encryption-enabled
Checks whether AWS CloudTrail is configured to use the server side encryption (SSE)
AWS Key Management Service (AWS KMS) customer master key (CMK) encryption. The rule
is COMPLIANT if the KmsKeyId is defined.
Identifier: CLOUD_TRAIL_ENCRYPTION_ENABLED
Trigger type: Periodic
AWS Region: All supported AWS regions except China (Beijing) and China (Ningxia)
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
