A config rule that checks that there is at least one multi-region AWS CloudTrail. The rule is NON_COMPLIANT if the trails do not match inputs parameters.

This config rule supports the following parameters:

  • s3BucketName
    • Required: No
    • Type: String
    • Description:Name of Amazon S3 bucket for AWS CloudTrail to deliver log files to.
  • snsTopicArn
    • Required: No
    • Type: String
    • Description:Amazon SNS topic ARN for AWS CloudTrail to use for notifications.
  • cloudWatchLogsLogGroupArn
    • Required: No
    • Type: String
    • Description:Amazon CloudWatch log group ARN for AWS CloudTrail to send data to.
  • includeManagementEvents
    • Required: No
    • Type: boolean
    • Description:Event selector to include management events for the AWS CloudTrail.
  • readWriteType
    • Required: No
    • Type: String
    • Description:Type of events to record. Valid values are ReadOnly, WriteOnly and ALL.

CloudFormation Template