Medium
Athena
Regional
Athena workgroups should have logging enabled
FSBP
Description
This control checks whether an Amazon Athena workgroup has logging enabled. The control fails if the workgroup doesn't have logging enabled. Audit logs track and monitor system activities. They provide a record of events that can help you detect security breaches, investigate incidents, and comply with regulations. Audit logs also enhance the overall accountability and transparency of your organization.
Remediation
Enable logging for your Athena workgroup by configuring PublishCloudWatchMetricsEnabled to true in the workgroup's result configuration.
Steps
- Navigate to the Athena console
- Select the workgroup that needs logging enabled
- Edit the workgroup configuration
- Enable 'Publish CloudWatch metrics' in the result configuration
- Save the configuration changes
- Verify that logging is now enabled for the workgroup
Compliance
FSBP