Logging for Redshift clusters should be enabled

redshift
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

Enable logging for your Amazon Redshift cluster.

Rationale

Logging data from Amazon Redshift clusters is helpful when troubleshooting or completing security and compliance audits.

Remediation

From the console

Follow the Amazon Redshift Configuring auditing using the console docs to enable logging, create audit log files, and store them in an Amazon S3 bucket.

From the command line

  1. Run enable-logging with your cluster ID and the S3 bucket where log files are to be stored.

list-buckets.sh

  aws redshift enable-logging
    --cluster-identifier your-cluster-id
    --bucket-name aws-redshift-logs