Ensure CloudTrail Trail Logs are Encrypted with KMS CMK in AWS
To help protect sensitive data at rest, ensure encryption is enabled for your Amazon CloudWatch Log Groups. Send results via Email.
icon
Breakdown
  1. Ensure CloudTrail Trail Logs are Encrypted with KMS CMK.
  2. Send results via Email. This result step can be changed from Email to Slack, Microsoft Teams or Discord.