CloudTrail waste check

Duplicate CloudTrail

duplicate_cloudtrail

High riskOnline onlyValidation L2Partner and hosted

What it finds

Duplicate CloudTrail: one of the CloudTrail checks in the management & operations group. Checks in this group look for: logging, tracing and management resources that keep data longer than needed, hold nothing, or are no longer used.

Why it costs money

Log ingestion and retention, trails, keys and dashboards each carry a recurring charge that keeps running after anyone looks at them.

How it is detected

Runs in the partner build and the paid hosted tiers.

AWS's own tools

AWS has a check on the same resource, with narrower or different criteria.

Checked against the AWS documentation.

Where this check runs

This check ships in the partner build, for consultancies that scan client accounts, and in the paid hosted tiers.