Back to All Checks
Medium DMS Regional

DMS replication tasks for the target database should have logging enabled

NIST 800-53PCI DSS v4.0.1PCI DSS v6.3.3HIPAA

Description

Confirms that DMS replication tasks have logging enabled at LOGGER_SEVERITY_DEFAULT or higher for TARGET_APPLY and TARGET_LOAD operations.

Remediation

Enable logging for DMS replication tasks with appropriate severity levels for target database operations.

Steps

  1. Navigate to the AWS DMS console
  2. Go to the Database migration tasks section
  3. Select the replication task that needs logging
  4. Modify the task settings
  5. In the 'Logging' section, enable 'Target apply logging' and 'Target load logging'
  6. Set the severity level to at least 'LOGGER_SEVERITY_DEFAULT' or higher
  7. Configure CloudWatch Logs destination if needed
  8. Save the configuration changes
  9. Verify that logging is now enabled for the target database operations

Compliance

NIST 800-53PCI DSS v4.0.1PCI DSS v6.3.3HIPAA
Start Your Free Security Check