cloud-report
Version:
Collects and analyzes cloud resources
44 lines (43 loc) • 2.23 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const types_1 = require("../../../types");
const base_1 = require("../../base");
class CloudTrailsLogValidationAnalyzer extends base_1.BaseAnalyzer {
analyze(params, fullReport) {
const allTrails = params.cloud_trails;
if (!allTrails) {
return undefined;
}
const cloud_trails_log_validation = { type: types_1.CheckAnalysisType.Reliability };
cloud_trails_log_validation.what = "Is log file validation enabled for cloud trails?";
cloud_trails_log_validation.why = `Cloud trails helps understand who did what so
enabling log file validation keep their integrity intact`;
cloud_trails_log_validation.recommendation = "Recommended to enable log file validation for all cloud trails";
cloud_trails_log_validation.benchmark = ['all'];
const allRegionsAnalysis = {};
for (const region in allTrails) {
const regionTrails = allTrails[region];
allRegionsAnalysis[region] = [];
for (const trail of regionTrails) {
const trail_analysis = {};
trail_analysis.resource = trail;
trail_analysis.resourceSummary = {
name: "CloudTrail", value: trail.Name,
};
if (trail.LogFileValidationEnabled) {
trail_analysis.severity = types_1.SeverityStatus.Good;
trail_analysis.message = "Log validation is enabled for the cloud trail";
}
else {
trail_analysis.severity = types_1.SeverityStatus.Failure;
trail_analysis.message = "Log validation is not enabled for the cloud trail";
trail_analysis.action = "Enable cloud trail log validation for log file integrity";
}
allRegionsAnalysis[region].push(trail_analysis);
}
}
cloud_trails_log_validation.regions = allRegionsAnalysis;
return { cloud_trails_log_validation };
}
}
exports.CloudTrailsLogValidationAnalyzer = CloudTrailsLogValidationAnalyzer;