RDS logs should be collected and retained for no less than 90 days

rds
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

RDS instances should have CloudWatch Logs exports enabled with log retention configured for no less than 90 days to ensure adequate log retention for security monitoring and compliance requirements.

Remediation

Configure CloudWatch log retention for RDS log groups to retain logs for at least 90 days by setting the retention period on the corresponding CloudWatch log groups for each enabled log export type. Refer to Logging and monitoring in Amazon RDS.