search

Rabadash8820 / AwsUtil

A set of scripts, templates, and schemas for general AWS cloud infrastructures.
Mozilla Public License 2.0
2 stars 0 forks source link

Encrypt CloudTrail Logs #53

Closed Rabadash8820 closed 6 years ago

Rabadash8820 commented 7 years ago

Since CloudTrail is used for auditing of AWS API access, this information should be kept very secure. The cloudtrail CF template should therefore accept a KMS key alias as a parameter. Constraints on KMS alias names are available here.