multi-region-cloudtrail-enabled - AWS Config

multi-region-cloudtrail-enabled

Checks that there is at least one multi-region AWS CloudTrail. The rule is non-compliant if the trails do not match input parameters

Identifier: MULTI_REGION_CLOUD_TRAIL_ENABLED

Trigger type: Periodic

AWS Region: All supported AWS regions

Parameters:

s3BucketName (Optional)
Type: String

Name of Amazon S3 bucket for AWS CloudTrail to deliver log files to.

snsTopicArn (Optional)
Type: String

Amazon SNS topic ARN for AWS CloudTrail to use for notifications.

cloudWatchLogsLogGroupArn (Optional)
Type: String

Amazon CloudWatch log group ARN for AWS CloudTrail to send data to.

includeManagementEvents (Optional)
Type: boolean

Event selector to include management events for the AWS CloudTrail.

readWriteType (Optional)
Type: String

Type of events to record. Valid values are ReadOnly, WriteOnly and ALL.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.