Amazon Web Services (AWS) PCI compliance dashboards

Tags: Compliance, PCI

Class: aws_cloudtrail

Required List: cde_hostnames

10.2.1 - All individual user accesses to cardholder data

Successful Logins by Service: Displays successful logins by AWS service that were established within the last 7 days.

Successful Logins by Source IPv4: Displays successful logins by source IPv4 that were established within the last 7 days.

Successful Logins by Type: Displays successful logins by identity type that were established within the last 7 days.

Successful Logins by Username: Displays successful logins by username that were established within the last 7 days.

Successful Logins by Timestamp: Displays successful logins within the last 7 days.

10.2.2 - All actions taken by any individual with root or administrative privileges

Elevated Access by Username: Displays elevated access by username that were established within the last 7 days.

Elevated Access by Service: Displays elevated access by service that were established within the last 7 days.

Elevated Access by Event Type: Displays elevated access by event type that were established within the last 7 days.

Elevated Access by Action: Displays elevated access by action that were established within the last 7 days.

Elevated Access by Timestamp: Displays elevated access by timestamp that were established within the last 7 days.

10.2.3 - Access to all audit trails

Audit Trail Cleared by Hostname: Displays modifications to audit logs by hostname within the last 7 days.

Audit Policy Changed by Hostname: Displays modifications to audit policy by hostname within the last 7 days.

Audit Trail Cleared by Username: Displays modifications to audit logs by username within the last 7 days.

System Time Changed by Hostname: Displays modifications to system time by hostname within the last 7 days.

System Restarted by Hostname: Displays system restarts by hostname within the last 7 days.

10.2.4 - Invalid logical access attempts

Failed Logins by Service: Displays failed logins by service that were established within the last 7 days.

Failed Logins by Type: Displays failed logins by identity type that were established within the last 7 days.

Failed Logins by Source IPv4: Displays failed logins by source IPv4 that were established within the last 7 days.

Failed Logins by Username: Displays failed logins by username that were established within the last 7 days.

Failed Logins by Timestamp: Displays failed logins within the last 7 days.

10.2.5 - Use of and changes to identification and authentication mechanisms—including but not limited to creation of new accounts and elevation of privileges—and all changes, additions, or deletions to accounts with root or administrative privileges

Users Modified: Displays user modifications within the last 7 days.

Users Created: Displays user creation within the last 7 days.

Users Deleted: Displays user deletion within the last 7 days.

User Modification Details: Display details regarding user modifications within the last 7 days.

User Modification by Timestamp: Illustrates user modifications by timestamp within the last 7 days.