cloudtrail-s3-bucket-public-access-prohibited

Checks if the S3 bucket configurations for your AWS CloudTrail logs block public access. The rule is NON_COMPLIANT if at least one S3 bucket for a CloudTrail trail is publicly accessible.

Identifier: CLOUDTRAIL_S3_BUCKET_PUBLIC_ACCESS_PROHIBITED

Resource Types: AWS::CloudTrail::Trail

Trigger type: Periodic

AWS Region: All supported AWS regions except US ISO West (Northern California), US ISO East, Asia Pacific (Malaysia), US ISOB East (Ohio), Canada West (Calgary) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.