12
Resources
12
Total Findings
12
Rules Executed
18
Unique Rules
0
Exception
2.538s
Timespent
Summary
Filter
SetRetentionDays
Cost Optimization- Description
- No retention day set in CloudWatch Log Groups. It incurs charges based on storage size
- Resources
- ap-southeast-1: Log::/aws/codebuild/dojo | Log::/aws/lambda/isengard-create-inventory-association | Log::/aws/lambda/isengard-create-vpc-endpoints-for-ssm | Log::/aws/lambda/isengard-set-default-instance-role | Log::/aws/lambda/isengard-set-default-patch-baseline | Log::/aws/lambda/webScrapNew | Log::/aws/lambda/webScrapper
- us-east-1: Log::/aws/lambda/isengard-create-inventory-association | Log::/aws/lambda/isengard-create-vpc-endpoints-for-ssm | Log::/aws/lambda/isengard-set-default-instance-role | Log::/aws/lambda/isengard-set-default-patch-baseline
- Recommendation
- CIS Cloudwatch Controls
trailWithoutCWLogs
Operation Excellence- Description
- CIS recommends that all CloudTrail to have logs store in CloudWatch so relevant CloudWatch log metrics control can be implement to heighten both AWS Security Pillar and Operation Excellence Pillar
- Resources
- us-east-1: ctLog::arn:aws:cloudtrail:us-east-1:961319563195:trail/IsengardTrail-DO-NOT-DELETE
- Label
- Cost Incurred
- Recommendation
- CIS Cloudwatch Controls
Detail
ap-southeast-1
1. /aws/codebuild/dojo
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.007480621337890625 MB | Set retention days |
2. /aws/lambda/isengard-create-inventory-association
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0013360977172851562 MB | Set retention days |
3. /aws/lambda/isengard-create-vpc-endpoints-for-ssm
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0012788772583007812 MB | Set retention days |
4. /aws/lambda/isengard-set-default-instance-role
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0013256072998046875 MB | Set retention days |
5. /aws/lambda/isengard-set-default-patch-baseline
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0017652511596679688 MB | Set retention days |
6. /aws/lambda/webScrapNew
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.026824951171875 MB | Set retention days |
7. /aws/lambda/webScrapper
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.045654296875 MB | Set retention days |
us-east-1
8. arn:aws:cloudtrail:us-east-1:961319563195:trail/IsengardTrail-DO-NOT-DELETE
| Check | Current Value | Recommendation |
|---|---|---|
| trailWithoutCWLogs | None | CloudTrail to have CloudWatch Log |
9. /aws/lambda/isengard-create-inventory-association
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0013341903686523438 MB | Set retention days |
10. /aws/lambda/isengard-create-vpc-endpoints-for-ssm
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.001373291015625 MB | Set retention days |
11. /aws/lambda/isengard-set-default-instance-role
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.0013256072998046875 MB | Set retention days |
12. /aws/lambda/isengard-set-default-patch-baseline
| Check | Current Value | Recommendation |
|---|---|---|
| SetRetentionDays | 0.001758575439453125 MB | Set retention days |