Medium RDS Regional

RDS for PostgreSQL DB instances should publish logs to CloudWatch Logs

PCI DSS v4.0.1PCI DSS 10.4.2

Description

Verifies that RDS for PostgreSQL instances publish postgresql logs to CloudWatch Logs.


Remediation

Enable postgresql log publishing to CloudWatch Logs for PostgreSQL DB instances.

Steps

  1. Sign in to the AWS Management Console and open the Amazon RDS console.
  2. Select the PostgreSQL DB instance and choose 'Modify'.
  3. In the 'Log Exports' setting, select 'postgresql'.
  4. Save the changes.

Compliance

PCI DSS v4.0.1PCI DSS 10.4.2