Medium
RDS
Regional
RDS for MariaDB DB instances should publish logs to CloudWatch Logs
NIST 800-53
Description
Checks if Amazon RDS for MariaDB DB instances are configured to publish logs to Amazon CloudWatch Logs. The control fails if the MariaDB DB instance is not configured to publish the 'error' log type to CloudWatch Logs.
Remediation
To publish MariaDB DB instance logs to CloudWatch Logs, follow these steps:
Steps
- Sign in to the AWS Management Console and open the Amazon RDS console.
- In the navigation pane, choose 'Databases'.
- Select the identified MariaDB DB instance that requires log publishing to be enabled.
- Choose 'Modify'.
- In the 'Database Options' section, locate the 'Log Exports' setting.
- Select 'error' from the available log types to enable MariaDB error logs.
- Scroll to the bottom of the page and choose 'Continue'.
- On the summary page, review your changes. Select 'Apply immediately' to enable logging right away, or choose to apply them during the next maintenance window.
- Click 'Modify DB Instance' to apply the changes.
- For detailed guidance, refer to the AWS documentation: 'Publishing MariaDB logs to Amazon CloudWatch Logs' in the Amazon RDS User Guide.
Compliance
NIST 800-53