Description

One or more Cloudtrail instances do not enable the EnableLogFileValidation attribute avoiding the integrity validation to be performed. This practice could aid an attacker to inject malicious information in log files without raising any alert.

Impact

Alterate the system logs integrity without raising alerts.

Recommendation

Set the EnableLogFileValidation attribute in true for all Cloudtrail instances.

Threat

Authenticated attacker from the Internet.

Expected Remediation Time

⏱️ 15 minutes.

Requirements

Fixes