le-tf-infra-aws
le-tf-infra-aws copied to clipboard
Security Audit layers should be updated to use the delegated admin approach
Describe the Feature
AWS supports using a delegated admin account to centralize CloudTrail events and management of the accounts of the AWS Organization. Adopting that approach should simplify the implementation, facilitate audit investigations, and cut down maintenance.
Expected Behavior
Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html
Use Case
Most projects require security auditing at some point and using CloudTrail is mandatory for that.
Describe Ideal Solution
Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html
Alternatives Considered
Explain what alternative solutions or features you've considered.