RDS logs should be collected and retained for no less than 90 days

rds
Esta página aún no está disponible en español. Estamos trabajando en su traducción.
Si tienes alguna pregunta o comentario sobre nuestro actual proyecto de traducción, no dudes en ponerte en contacto con nosotros.

Description

RDS instances should have CloudWatch Logs exports enabled with log retention configured for no less than 90 days to ensure adequate log retention for security monitoring and compliance requirements.

Remediation

Configure CloudWatch log retention for RDS log groups to retain logs for at least 90 days by setting the retention period on the corresponding CloudWatch log groups for each enabled log export type. Refer to Logging and monitoring in Amazon RDS.