RDS logs should be collected and retained for no less than 90 days

rds
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

RDS instances should have CloudWatch Logs exports enabled with log retention configured for no less than 90 days to ensure adequate log retention for security monitoring and compliance requirements.

Remediation

Configure CloudWatch log retention for RDS log groups to retain logs for at least 90 days by setting the retention period on the corresponding CloudWatch log groups for each enabled log export type. Refer to Logging and monitoring in Amazon RDS.