Medium
RDS
Regional
RDS DB instances should publish logs to CloudWatch Logs
NISTISO 27001HIPAA
Description
Checks if RDS instances have database logging enabled. This check also fetches the tags associated with each RDS instance.
Remediation
To enable database logging for the identified RDS instance, follow these steps:
Steps
- Sign in to the AWS Management Console and open the Amazon RDS console.
- In the navigation pane, choose 'Databases'.
- Select the identified RDS instance that requires database logging to be enabled.
- Choose 'Modify'.
- In the 'Database Options' section, locate the 'Log Exports' setting.
- Select the types of logs you want to enable (e.g., error logs, general logs, slow query logs).
- Scroll to the bottom of the page and choose 'Continue'.
- On the summary page, review your changes. Select 'Apply immediately' to enable logging right away, or choose to apply them during the next maintenance window.
- Click 'Modify DB Instance' to apply the changes.
Compliance
NISTISO 27001HIPAA