top of page

RDS.9

Database logging should be enabled

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

AWS Relational Database Service

AWS Foundational Best Practice, NIST CSF, NIST.800-53.r5,

This control checks whether the following Amazon RDS logs are enabled and sent to CloudWatch Logs: Oracle: (Alert; Audit; Trace; Listener); PostgreSQL: (Postgresql; Upgrade); MySQL: (Audit; Error; General; SlowQuery); MariaDB: (Audit; Error; General; SlowQuery); SQL Server: (Error; Agent); Aurora: (Audit; Error; General; SlowQuery); Aurora-MySQL: (Audit; Error; General; SlowQuery); Aurora-PostgreSQL: (Postgresql).

bottom of page