Route Table Changes
From AWS Documentation: "A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is directed." CUIT will monitor for unauthorized changes made to routing tables to avoid scenarios such as ex filtration of data to malicious destinations.
"Your VPC has an implicit router, and you use route tables to control where network traffic is directed. Each subnet in your VPC must be associated with a route table, which controls the routing for the subnet (subnet route table). You can explicitly associate a subnet with a particular route table. Otherwise, the subnet is implicitly associated with the main route table. A subnet can only be associated with one route table at a time, but you can associate multiple subnets with the same subnet route table."
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html