There are a few settings in the CloudFormation template which cause issues with the CIS AWS Foundations Benchmark. https://docs.aws.amazon.com/securityhub/latest/userguide/cis-aws-foundations-benchmark.html
- CloudTrail should have encryption at-rest enabled
- CloudTrail log file validation should be enabled
- CloudTrail trails should be integrated with Amazon CloudWatch logs
- Ensure S3 bucket access logging is enabled on the CloudTrail S3 bucket
Would you be willing to accept a PR which allows these configuration options?
There are a few settings in the CloudFormation template which cause issues with the CIS AWS Foundations Benchmark. https://docs.aws.amazon.com/securityhub/latest/userguide/cis-aws-foundations-benchmark.html
Would you be willing to accept a PR which allows these configuration options?