RDS logs should be collected and retained for no less than 90 days

rds
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

RDS instances should have CloudWatch Logs exports enabled with log retention configured for no less than 90 days to ensure adequate log retention for security monitoring and compliance requirements.

Remediation

Configure CloudWatch log retention for RDS log groups to retain logs for at least 90 days by setting the retention period on the corresponding CloudWatch log groups for each enabled log export type. Refer to Logging and monitoring in Amazon RDS.