CloudWatch.13

Ensure a log metric filter and alarm exist for route table changes

Severity

Cloud Platforms

Resources

Related Standards

Automated

LOW

AWS

Amazon CloudWatch

AWS CIS Foundations v1.2 & v1.4, AWS Well-Architected, CDR, ISO27001, SOC2, NIST CSF,

YES

Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric filters and alarms. Routing tables are used to route network traffic between subnets and to network gateways. It is recommended that a metric filter and alarm be established for changes to route tables.