All changes to configurations and policies are logged and reviewed. Privileged user activities including configuration changes and administrative actions are logged and reviewed on a timely basis. Audit logs are stored securely to prevent tampering and are reviewed periodically by the security team.
Are admin activities (logins, changes) logged and reviewed periodically?
All administrative activities including logins, configuration changes, and data access events are logged and reviewed…
Is physical access to the locations that house the components is logged...
AWS maintains comprehensive physical access logging and auditing at all data center facilities. All entry and exit events are recorded, monitored…