AWS CloudTrail logging is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_251
Category - Subcategory	Logging - Disabled or missing
Provider	AWS
Severity	LOW
Framework	Terraform
Mapped CSPM/KSPM Rule	674cfb15-a1cd-415b-b312-d41b3a096d83

Impact

It is recommended to have a proper logging process for AWS CloudTrail in order to track configuration changes conducted manually and programmatically and trace back unapproved changes.

How to Fix

[source,go]

resource "aws_cloudtrail" "pass" { name = "TRAIL" s3_bucket_name = aws_s3_bucket.test.id include_global_service_events = true enable_logging = true kms_key_id = aws_kms_key.test.arn }