https://hub.flowpipe.io/mods/turbot/aws_cis/pipelines/aws_cis.pipeline.cis_v400_4_2
4.2 Ensure management console sign-in without MFA is monitored | aws_cis | Flowpipe Hub
Real-time monitoring of API calls can be achieved by directing CloudTrail Logs to CloudWatch Logs, or an external Security information and event management...
console sign inensuremanagementwithoutmfa