Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Alibaba Cloud accounts using Powerpipe and Steampipe.
This occurs throughout the mod, but as a specific example:
control "cis_v100_2_1" {
title = "2.1 Ensure that ActionTrail are configured to export copies of all Log entries"
description = "ActionTrail is a web service that records API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the Alibaba Cloud service. ActionTrail provides a history of API calls for an account, including API calls made via the Management Console, SDKs, command line tools."
sql = query.action_trail_enabled.sql
documentation = file("./cis_v100/docs/cis_v100_2_1.md")
tags = merge(local.cis_v100_2_common_tags, {
cis_item_id = "2.1"
cis_level = "1"
cis_type = "automated"
service = "AliCloud/ActionTrail"
})
}
This occurs throughout the mod, but as a specific example:
This is changed from:
to: