amazon-archives/aws-security-benchmark

control_2_4_ensure_cloudtrail_cloudwatch_logs_integration fails in Gov-Cloud

Opened this issue · 0 comments

The string search for "arn:aws:logs" is too restrictive and fails in gov-cloud. Consider using a regex or adding a second conditional for "arn:aws-us-gov:iam:"