All checks
Medium DMS · regional

DMS replication tasks for the source database should have logging enabled

Checks that the replication task logs its SOURCE_CAPTURE and SOURCE_UNLOAD components to CloudWatch at LOGGER_SEVERITY_DEFAULT or higher, so the changes DMS captures from the source database and the data it unloads from it leave a record for troubleshooting, auditing and recovery. LOGGER_SEVERITY_INFO fails, though it logs the same messages as DEFAULT.

service
DMS
severity
Medium
scope
evaluated in every region

How to fix it

  • Interrupts service: A task that has run must be Stopped or Failed before it can be modified, so its replication pauses until you restart it.

In the console

Database Migration Service → Database migration tasks → the task → Modify → Task settings

Enable CloudWatch logs
Selected (EnableLogging true under Logging in the JSON editor)
SOURCE_CAPTURE log severity
LOGGER_SEVERITY_DEFAULT, as AWS recommends; LOGGER_SEVERITY_DETAILED_DEBUG passes but can fill the instance's storage
SOURCE_UNLOAD log severity
LOGGER_SEVERITY_DEFAULT, as AWS recommends; LOGGER_SEVERITY_DETAILED_DEBUG passes but can fill the instance's storage

With the AWS CLI

aws dms modify-replication-task --replication-task-arn <replication-task-arn> --replication-task-settings '{"Logging":{"EnableLogging":true,"LogComponents":[{"Id":"SOURCE_CAPTURE","Severity":"LOGGER_SEVERITY_DEFAULT"},{"Id":"SOURCE_UNLOAD","Severity":"LOGGER_SEVERITY_DEFAULT"}]}}' --region <region>

With Terraform

resource "aws_dms_replication_task" "this" {
  replication_task_id      = var.replication_task_id
  migration_type           = var.migration_type
  replication_instance_arn = var.replication_instance_arn
  source_endpoint_arn      = var.source_endpoint_arn
  target_endpoint_arn      = var.target_endpoint_arn
  table_mappings           = var.table_mappings
  replication_task_settings = jsonencode({
    Logging = {
      EnableLogging = true
      LogComponents = [
        { Id = "SOURCE_CAPTURE", Severity = "LOGGER_SEVERITY_DEFAULT" },
        { Id = "SOURCE_UNLOAD", Severity = "LOGGER_SEVERITY_DEFAULT" },
      ]
    }
  })
}

See which of your accounts this check is failing on.

Book a live scan