mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-09-30 12:43:18 +00:00
142e221c47
Switch UnauthorizedApiCalls alarm from 3/3 consecutive to 3/6 M-of-N so a single quiet 5-min window can't reset detection. The 3/3 setting pre-dates #36 and was sized to suppress CFN/Config noise that #36 now removes at the filter level, making a wider M-of-N evaluation window safe from flap risk. Enable CloudTrail Insights (ApiCallRateInsight + ApiErrorRateInsight) on seahaven-org-trail as a compensating control for the residual risk accepted in #36 — the CFN/Config-proxied denials intentionally excluded from CIS 4.1 — and as a backstop for low-and-slow patterns the 5-min alarm may miss. Cost ≈$35–$53/month at current org trail volume. Refs: #37 Co-authored-by: amoussa1229 <166072409+amoussa1229@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| account-baseline-stack.ts | ||
| backup-offsite-stack.ts | ||
| backup-stack.ts | ||
| bedrock-logging-regional.ts | ||
| bedrock-logging.ts | ||
| cis-monitoring.ts | ||
| detective-controls.ts | ||
| dynamodb-cmk-stack.ts | ||
| flow-logs.ts | ||
| governance-toggles.ts | ||
| logs-key.ts | ||
| regional-baseline-stack.ts | ||
| ses-monitoring.ts | ||
| web-acl.ts | ||