CloudTrail trail must be multi-region

Critical AWS General aws-cloudtrail-trail-cloudtrail-trail-multi-region

Applies to

AWS::CloudTrail::Trail

What CGPulse checks

A resource passes this rule when isMultiRegionTrail must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Enable CloudTrail logging to capture audit and operational events for investigation. In AWS Console: CloudTrail > Trails > select trail > start logging. See: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-turning-on-and-off.html

Terraform

resource "aws_cloudtrail" "{name}" {
  is_multi_region_trail = true
  enable_logging        = true
}

Compliance frameworks

Cloud Security: AWS Foundations
HIPAA: Health Information Protection164.312(b)
ISO 27001: Information SecurityA.12.4.1
NIST 800-53: Cloud Security ControlsAU-2
PCI DSS v4.010.2.1
SOC 2: Trust ServicesCC7.2

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan