The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Amazon Web Services (AWS) PCI compliance dashboards

Prev Next

Tags: Compliance, PCI

Class: aws_cloudtrail

Required List: cde_hostnames

10.2.1 - All individual user accesses to cardholder data

Successful Logins by Service: Displays successful logins by AWS service that were established within the last 7 days.

Successful Logins by Source IPv4: Displays successful logins by source IPv4 that were established within the last 7 days.

Successful Logins by Type: Displays successful logins by identity type that were established within the last 7 days.

Successful Logins by Username: Displays successful logins by username that were established within the last 7 days.

Successful Logins by Timestamp: Displays successful logins within the last 7 days.

Amazon Web Services AWS PCI.png
    10.2.2 - All actions taken by any individual with root or administrative privileges

    Elevated Access by Username: Displays elevated access by username that were established within the last 7 days.

    Elevated Access by Service: Displays elevated access by service that were established within the last 7 days.

    Elevated Access by Event Type: Displays elevated access by event type that were established within the last 7 days.

    Elevated Access by Action: Displays elevated access by action that were established within the last 7 days.

    Elevated Access by Timestamp: Displays elevated access by timestamp that were established within the last 7 days.

    Amazon Web Services AWS PCI_1.png
        10.2.4 - Invalid logical access attempts

        Failed Logins by Service: Displays failed logins by service that were established within the last 7 days.

        Failed Logins by Type: Displays failed logins by identity type that were established within the last 7 days.

        Failed Logins by Source IPv4: Displays failed logins by source IPv4 that were established within the last 7 days.

        Failed Logins by Username: Displays failed logins by username that were established within the last 7 days.

        Failed Logins by Timestamp: Displays failed logins within the last 7 days.

        Amazon Web Services AWS PCI_2.png