Ensure Alibaba Cloud Action Trail Logging for all events

Error: Alibaba Cloud Action Trail Logging is not enabled for all events

Bridgecrew Policy ID: BC_ALI_LOGGING_5
Checkov Check ID: CKV_ALI_5
Severity: MEDIUM

Alibaba Cloud Action Trail Logging is not enabled for all events

Description

By enabling Action Trail logging for all events, you can track and monitor all activity in your Alibaba Cloud account, including all API calls and account activity. This can help to identify potential security issues or unauthorized access, and can also be useful for auditing purposes.

Fix - Buildtime

Terraform

resource "alicloud_actiontrail_trail" "pass" {
  trail_name         = "action-trail"
  oss_write_role_arn = "acs:ram::1182725xxxxxxxxxxx"
  oss_bucket_name    = "bucket_name"
  event_rw           = "All"
  trail_region       = "All"
}