You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
// Security Alarms// !!! Need to setup SecurityHub, GuardDuty manually on Organizations Management account// AWS Config and CloudTrail are set up by ControlTower// CloudWatch LogGroup Name for CloudTrail - Created by ControlTower for each accountconstcloudTrailLogGroupName='aws-controltower/CloudTrailLogs';constsecAlarm=newBLEASecurityAlarmStack(app,`${pjPrefix}-SecurityAlarm`,{notifyEmail: envVals['securityNotifyEmail'],cloudTrailLogGroupName: cloudTrailLogGroupName,env: getProcEnv(),});
A reproducible test case or series of steps
Control Tower landing zone version 3.0
Enable the option to choose organization-level AWS CloudTrail trails. Deploy to Multiaccount environment
The version of our code being used
BLEA v.2.0.0
Control Tower landing zone version 3.0
Any modifications you've made relevant to the bug
none
Anything unusual about your environment or deployment
none
The text was updated successfully, but these errors were encountered:
Thank you for feedback. We has resolved this with #70 .
We changed default environment to LZ3.0 with CloudTrail support, and add document so you can handle LZ 2.9 and before.
Describe issue
BLEA 2.0.0 does not be supported organization trails in Control Tower landing zone version 3.0
AWS Control Tower landing zone version 3.0 includes the following updates:
https://docs.aws.amazon.com/controltower/latest/userguide/2022-all.html#version-3.0
BLEA 2.0.0 (latest) assumes the previous ControlTower version specification and is written as follows.
https://github.com/aws-samples/baseline-environment-on-aws/blob/9bb15dfd4ed282cafd9b6e1fda9fd096b1bcaded/usecases/base-ct-guest/bin/blea-base-ct-guest.ts
A reproducible test case or series of steps
Control Tower landing zone version 3.0
Enable the option to choose organization-level AWS CloudTrail trails.
Deploy to Multiaccount environment
The version of our code being used
BLEA v.2.0.0
Control Tower landing zone version 3.0
Any modifications you've made relevant to the bug
none
Anything unusual about your environment or deployment
none
The text was updated successfully, but these errors were encountered: