standard
turbot/aws_compliance
Get Involved
Version
Pipeline: Correct CloudTrail trails with S3 logging disabled
Enable S3 logging for CloudTrail trails with S3 logging disabled.
Run the pipeline
To run this pipeline from your terminal:
flowpipe pipeline run aws_compliance.pipeline.correct_cloudtrail_trails_with_s3_logging_disabled \ --arg 'items=<list(object({ title = string name = string region = string account_id = string conn = string }))>'
Use this pipeline
To call this pipeline from your pipeline, use a step:
step "pipeline" "step_name" { pipeline = aws_compliance.pipeline.correct_cloudtrail_trails_with_s3_logging_disabled args = { items = <list(object({ title = string name = string region = string account_id = string conn = string }))> }}
Params
Name | Type | Required | Description | Default |
---|---|---|---|---|
items | list(object({ title = string name = string region = string account_id = string conn = string })) | Yes | A collection of detected resources to run corrective actions against. | - |
notifier | notifier | Yes | The name of the notifier to use for sending notification messages. | notifier.default |
bucket_name | string | Yes | The name of the bucket. | test-fp-bucket-trail-logging |
notification_level | string verbose , info , error | Yes | The verbosity level of notification messages to send. | info |
approvers | list(notifier) | Yes | List of notifiers to be used for obtaining action/approval decisions. | notifier.default |
default_action | string notify , skip , enable_s3_logging | Yes | The default action to use when there are no approvers. | notify |
enabled_actions | list(string) skip , enable_s3_logging | Yes | The list of enabled actions approvers can select. |
|
Outputs
This pipeline has no outputs.
Tags
category = Compliance
folder = Internal
mod = aws
service = AWS/Cloudtrail