<  Back to rules search

Redshift cluster logging is enabled

redshift

Classification:

compliance

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

Enable logging for your Amazon Redshift cluster.

Rationale

Logging data from Amazon Redshift clusters is helpful when troubleshooting or completing security and compliance audits.

Remediation

Console

Follow the Amazon Redshift Configuring auditing using the console docs to enable logging, create audit log files, and store them in an Amazon S3 bucket.

CLI

  1. Run enable-logging with your cluster ID and the S3 bucket where log files are to be stored.

list-buckets.sh

  aws redshift enable-logging
    --cluster-identifier your-cluster-id
    --bucket-name aws-redshift-logs