Ensure respective logs of Amazon RDS are enabled

Error: Respective logs of Amazon RDS are disabled

Bridgecrew Policy ID: BC_AWS_IAM_60
Checkov Check ID: CKV_AWS_129
Severity: LOW

Respective logs of Amazon RDS are disabled

Description

Use CloudWatch logging types for Amazon Relational Database Service (Amazon RDS) instances

Fix - Buildtime

Terraform

  • Resource: aws_db_instance
  • Argument: enabled_cloudwatch_logs_exports
resource "aws_db_instance" "mysql" {
  allocated_storage = 5
    ...
+ enabled_cloudwatch_logs_exports = ["general", "error", "slowquery"]
}

Did this page help you?