Skip to content

Commit afab66f

Browse files
authored
Merge pull request #14 from secyed/patch-1
Update README.md
2 parents 8498532 + 5a50468 commit afab66f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Deny-changes-to-security-services/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
AWS offers security services that help you monitor access, security posture, and activity within your organization. Enforce guardrails to restrict member accounts from disabling these tools that are used to govern and comply, in operational auditing, and risk auditing of your AWS accounts.
44

55

6-
| Included Policy | Rational |
6+
| Included Policy | Rationale |
77
|------|-------------|
88
|[Deny users from disabling Amazon CloudWatch or altering its configuration](Deny-users-from-disabling-or-altering-CloudWatch.json)| Restrict delete or configuration change to your critical dashboards or alarms to a privileged role.|
99
| [Deny enabling and disabling AWS Config](Deny-enabling-and-disabling-AWS-Config.json) |Restrict enabling/disabling AWS Config to a privileged role. If you use AWS Control Tower, refer to [Disallow Changes to AWS Config Rules Set Up by AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/mandatory-controls.html#config-rule-disallow-changes) applied by default.|

0 commit comments

Comments
 (0)