Back to All Checks
Medium DMS Regional

DMS replication tasks for the source database should have logging enabled

NIST 800-53PCI DSS v4.0.1PCI DSS v10.4.2

Description

Verifies that DMS replication tasks have logging enabled at LOGGER_SEVERITY_DEFAULT or higher for SOURCE_CAPTURE and SOURCE_UNLOAD components.

Remediation

Enable logging for DMS replication tasks with appropriate severity levels for source database operations.

Steps

  1. Navigate to the AWS DMS console
  2. Go to the Database migration tasks section
  3. Select the replication task that needs logging
  4. Modify the task settings
  5. In the 'Logging' section, enable 'Source capture logging' and 'Source unload logging'
  6. Set the severity level to at least 'LOGGER_SEVERITY_DEFAULT' or higher
  7. Configure CloudWatch Logs destination if needed
  8. Save the configuration changes
  9. Verify that logging is now enabled for the source database operations

Compliance

NIST 800-53PCI DSS v4.0.1PCI DSS v10.4.2
Start Your Free Security Check