Medium
RDS
Regional
Aurora MySQL DB clusters should have audit logging enabled
NIST 800-53HIPAA
Description
Confirms that Aurora MySQL DB clusters have audit logging enabled via the server_audit_logs parameter.
Remediation
Enable audit logging for Aurora MySQL clusters via the DB cluster parameter group.
Steps
- Sign in to the AWS Management Console and open the Amazon RDS console.
- Select the Aurora MySQL cluster and choose 'Modify'.
- Locate the 'DB cluster parameter group' setting.
- If using a custom group, set 'server_audit_logs' to '1'.
- If using the default group, create a custom one and set the parameter.
- Apply the parameter group and save.
Compliance
NIST 800-53HIPAA