Redshift Serverless namespaces should export logs to CloudWatch Logs

How to fix it

Export the namespace's connection log and user log to CloudWatch Logs, which is the only destination Redshift Serverless offers. Redshift creates the log group itself. The user activity log can be exported too, but this check does not require it, because the control asks only for the connection and user logs.

In the console

Redshift Serverless → Namespace configuration → the namespace → Security and encryption → Edit

With the AWS CLI

aws redshift-serverless update-namespace --namespace-name <namespace-name> --log-exports connectionlog userlog --region <region>

With Terraform

resource "aws_redshiftserverless_namespace" "this" {
  namespace_name = var.namespace_name
  log_exports    = ["connectionlog", "userlog"]
}