cisagov / crossfeed

External monitoring for organization assets
https://docs.crossfeed.cyber.dhs.gov
Creative Commons Zero v1.0 Universal
372 stars 54 forks source link

[CloudWatch.1] A log metric filter and alarm should exist for usage of the "root" user #2320

Closed Matthew-Grayson closed 1 year ago

Matthew-Grayson commented 1 year ago

https://docs.aws.amazon.com/securityhub/latest/userguide/cloudwatch-controls.html#cloudwatch-1