---
title: EKS cluster control plane logging should be enabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > EKS cluster control plane logging
  should be enabled
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# EKS cluster control plane logging should be enabled
 
## Description{% #description %}

EKS clusters should have all five control plane log types (API server, audit, authenticator, controller manager, and scheduler) enabled to provide comprehensive visibility into managed Kubernetes control plane operations. Control plane logs create a persistent record of administrative activity, authentication events, scheduling behavior, and platform operations to support monitoring, troubleshooting, investigation, and accountability.

## Remediation{% #remediation %}

For each EKS cluster, enable all control plane log types from the EKS console under **Observability** > **Control plane logs**, or use the AWS CLI to update the cluster configuration with all five log types enabled. See the [Amazon EKS control plane logging documentation](https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html) for details.

## References{% #references %}