Improve check21 If no account cloudtrail trail is found, check org trail @nimrodkor @bridgecrewio

check21 - If no account CloudTrail trail is found, check org trail
This commit is contained in:
Toni de la Fuente
2020-04-29 22:24:24 +02:00
committed by GitHub

View File

@@ -35,6 +35,11 @@ check21(){
done
if [[ $trail_count == 0 ]]; then
textFail "No CloudTrail trails were found in the account"
ORG_TRAIL=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region us-east-1 | jq '.trailList[] | select(.IsMultiRegionTrail and .IsOrganizationTrail) | .Name' | sed 's/"//g')
if [[ $ORG_TRAIL != "" ]]; then
textPass "$ORG_TRAIL trail in $regx is enabled for all regions"
else
textFail "No CloudTrail trails were found in the account"
fi
fi
}