Lambda function to automatically restart CloudTrail trail when stopped using AWS CloudTrail API StopLogging is issued. The script is built using a framework that have placeholders for *Priority Action *Alerting *Forensics **Countermeasures *Logging

This script will be featured in a upcoming blog about AIRR - Automatic Incident Response Remediation. This file will be updated with the correct link once published.

Copyright 2016 Amazon.com, Inc. or its affiliates. All Rights Reserved.

Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with the License. A copy of the License is located at

http://aws.amazon.com/apache2.0/

or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.