Pipeline: Correct CloudTrail trail logs not encrypted with KMS CMK

Executes corrective actions on CloudTrail trail logs not encrypted with KMS CMK.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_cloudtrail_trail_logs_not_encrypted_with_kms_cmk \
  --arg 'items=<list(object({
      title      = string
      account_id = string
      name       = string
      region     = string
      conn       = string
    }))>' \
  --arg 'kms_key_id=<string>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
  pipeline = aws_compliance.pipeline.correct_cloudtrail_trail_logs_not_encrypted_with_kms_cmk  
  args = {
    items = <list(object({
      title      = string
      account_id = string
      name       = string
      region     = string
      conn       = string
    }))>
    kms_key_id = <string>
  }
}

Triggers

Detect & correct CloudTrail trail logs not encrypted with KMS CMK

Params

Name	Type	Required	Description	Default
items	list(object({ title = string account_id = string name = string region = string conn = string }))	Yes		-
kms_key_id	string	Yes	Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail.	-
notifier	notifier	Yes	The name of the notifier to use for sending notification messages.	`notifier.default`
notification_level	string `verbose`, `info`, `error`	Yes	The verbosity level of notification messages to send.	`info`
approvers	list(notifier)	Yes	List of notifiers to be used for obtaining action/approval decisions.	`notifier.default`
default_action	string `notify`, `skip`, `encrypt_cloud_trail_logs`	Yes	The default action to use when there are no approvers.	`notify`
enabled_actions	list(string) `skip`, `encrypt_cloud_trail_logs`	Yes	The list of enabled actions approvers can select.	`[ "skip", "encrypt_cloud_trail_logs" ]`

Outputs

This pipeline has no outputs.

Pipeline: Correct CloudTrail trail logs not encrypted with KMS CMK

Run the pipeline

Use this pipeline

Triggers

Params

Outputs

Tags