cloudtrail-default-audit-posture-has-significant-gaps

Status: OUT

CloudTrail's default configuration provides only management-event coverage with 90-day retention and ~5-minute delivery latency — data events, network events, and long-term retention all require explicit opt-in and additional cost.

JSON