Panther medium experimental python
AWS CloudTrail Log Validation
This policy ensures that CloudTrail logs have file integrity validation enabled.
Detection Logic
def policy(resource):
# Explicit check for True as the value may be None, and we want to return a bool not a NoneType
return resource["LogFileValidationEnabled"] is True Field Validations
Loading…
Comments (0)
Loading comments...