Medium
CodeBuild
Regional
CodeBuild project environments should have a logging configuration
NISTISO 27001HIPAA
Description
This control checks whether a CodeBuild project environment has at least one log option enabled, either to S3 or CloudWatch logs. It fails if a CodeBuild project environment does not have at least one log option enabled.
Remediation
To enable logging for CodeBuild project environments, configure either S3 or CloudWatch Logs in the project settings.
Steps
- Open the AWS CodeBuild console.
- Select the build project to modify.
- Navigate to the 'Logs' section in the project settings.
- Enable either 'S3 logs' or 'CloudWatch Logs' and configure the necessary settings.
- Save the changes to the project configuration.
Compliance
NISTISO 27001HIPAA