Cloud-custodian: CloudTrail - Support for enabling log file validation

[mukavik]

It would be good if an action on CloudTrail can be added to enable log file validation for new or existing trails.

[kapilt]

missing where this isn't possible today, ie. find all the multi-region trails with log file validation disabled via..

policies:
    - name: trails-missing-logfile
      resource: cloudtrail
      filters:
        - IsMultiRegionTrail: true
        - LogFileValidationEnabled: false

[mukavik]

@kapilt Apologies but i did not get your comment. Maybe to clarify ,my request was to add some action for CloudTrail to turn log validation on, through C7N if those were detected to be off.

[baptiste-s]

missing where this isn't possible today, ie. find all the multi-region trails with log file validation disabled via..

policies:
    - name: trails-missing-logfile
      resource: cloudtrail
      filters:
        - IsMultiRegionTrail: true
        - LogFileValidationEnabled: false

Hi kapilt. Could you point me to the documentation for resource: cloudtrail please. I have been using custodian for a month and I am still struggling to find the option I need.

[kapilt]

custodian schema aws.cloudtrail