Aurora MySQL DB clusters should publish audit logs to CloudWatch Logs

Description

Checks whether an Amazon Aurora MySQL DB cluster is configured to publish audit logs to Amazon CloudWatch Logs. Audit logs capture a record of database activity, including login attempts, data modifications, schema changes, and other events. These logs can be audited for security and compliance purposes. By configuring an Aurora MySQL DB cluster to publish audit logs to a log group in Amazon CloudWatch Logs, users can perform real-time analysis of the log data, as CloudWatch Logs retains logs in highly durable storage.

---

Remediation

To remediate this issue, enable audit log publishing to CloudWatch Logs for your Aurora MySQL DB clusters.

Steps