All checks
Medium DMS · regional

DMS replication tasks for the target database should have logging enabled

Checks that the replication task logs its TARGET_APPLY and TARGET_LOAD components to CloudWatch at LOGGER_SEVERITY_DEFAULT or higher, so the statements DMS applies to the target database and the data it loads there leave a record for troubleshooting, auditing and recovery. LOGGER_SEVERITY_INFO fails, though it logs the same messages as DEFAULT.

service
DMS
severity
Medium
scope
evaluated in every region

How to fix it

  • Interrupts service: A task that has run must be Stopped or Failed before it can be modified, so its replication pauses until you restart it.

In the console

Database Migration Service → Database migration tasks → the task → Modify → Task settings

Enable CloudWatch logs
Selected (EnableLogging true under Logging in the JSON editor)
TARGET_APPLY log severity
LOGGER_SEVERITY_DEFAULT, as AWS recommends; LOGGER_SEVERITY_DETAILED_DEBUG passes but can fill the instance's storage
TARGET_LOAD log severity
LOGGER_SEVERITY_DEFAULT, as AWS recommends; LOGGER_SEVERITY_DETAILED_DEBUG passes but can fill the instance's storage

With the AWS CLI

aws dms modify-replication-task --replication-task-arn <replication-task-arn> --replication-task-settings '{"Logging":{"EnableLogging":true,"LogComponents":[{"Id":"TARGET_APPLY","Severity":"LOGGER_SEVERITY_DEFAULT"},{"Id":"TARGET_LOAD","Severity":"LOGGER_SEVERITY_DEFAULT"}]}}' --region <region>

With Terraform

resource "aws_dms_replication_task" "this" {
  replication_task_id      = var.replication_task_id
  migration_type           = var.migration_type
  replication_instance_arn = var.replication_instance_arn
  source_endpoint_arn      = var.source_endpoint_arn
  target_endpoint_arn      = var.target_endpoint_arn
  table_mappings           = var.table_mappings
  replication_task_settings = jsonencode({
    Logging = {
      EnableLogging = true
      LogComponents = [
        { Id = "TARGET_APPLY", Severity = "LOGGER_SEVERITY_DEFAULT" },
        { Id = "TARGET_LOAD", Severity = "LOGGER_SEVERITY_DEFAULT" },
      ]
    }
  })
}

See which of your accounts this check is failing on.

Book a live scan