CloudWatch

AWS CloudWatch

Overview

AWS CloudWatch integration - regscale aws sync_cloudwatch - evaluates audit review and system monitoring controls (AU-6, SI-4).

Command Syntax

Bash

regscale aws sync_cloudwatch [OPTIONS]

Basic Usage

Bash

# Sync CloudWatch logging configurations
regscale aws sync_cloudwatch --regscale-id 123 --create-evidence

# Filter by tags
regscale aws sync_cloudwatch \
  --regscale-id 123 \
  --tags Environment=Production \
  --create-evidence

NIST 800-53 Controls Assessed

• AU-6: Audit Record Review, Analysis, and Reporting
• SI-4: System Monitoring

What Gets Created in RegScale

• Control Assessments: AU-6, SI-4
• Evidence: Log groups, retention policies, metric filters
• Issues: Short retention, no metric filters

Common Use Cases

Bash

# Production monitoring audit
regscale aws sync_cloudwatch \
  --regscale-id 123 \
  --tags Environment=Production \
  --create-evidence \
  --evidence-control-ids AU-6,SI-4 \
  --create-issues