DMS replication tasks for the source database should have logging enabled
Description
This control checks whether logging is enabled with the minimum severity level of LOGGER_SEVERITY_DEFAULT for DMS replication tasks, specifically SOURCE_CAPTURE and SOURCE_UNLOAD. The control fails if logging is not enabled for these tasks or if the minimum severity level is less than LOGGER_SEVERITY_DEFAULT. DMS utilizes Amazon CloudWatch to log information during the migration process. Users can specify which component activities are logged and the level of detail using logging task settings. Logging plays a critical role in DMS replication tasks by enabling monitoring, troubleshooting, auditing, performance analysis, error detection and recovery, and historical analysis and reporting.
Remediation
Enable logging for DMS replication tasks with appropriate severity levels for source database operations.
Steps
- Navigate to the AWS DMS console
- Go to the Database migration tasks section
- Select the replication task that needs logging
- Modify the task settings
- In the 'Logging' section, enable 'Source capture logging' and 'Source unload logging'
- Set the severity level to at least 'LOGGER_SEVERITY_DEFAULT' or higher
- Configure CloudWatch Logs destination if needed
- Save the configuration changes
- Verify that logging is now enabled for the source database operations