Logging

Rule Name	AppSec Rule ID	Severity
Alibaba Cloud Action Trail Logging is not enabled for all regions misconfiguration detected in code	APPSEC_ALI_4	MEDIUM
Alibaba Cloud Action Trail Logging is not enabled for all events misconfiguration detected in code	APPSEC_ALI_5	MEDIUM
Alibaba Cloud OSS bucket has access logging enabled misconfiguration detected in code	APPSEC_ALI_12	LOW
Alibaba Cloud RDS Instance SQL Collector Retention Period is less than 180 misconfiguration detected in code	APPSEC_ALI_25	LOW
Alibaba Cloud RDS instance does not have log_duration enabled misconfiguration detected in code	APPSEC_ALI_35	LOW
Alibaba Cloud RDS instance has log_disconnections disabled misconfiguration detected in code	APPSEC_ALI_36	LOW
Alibaba Cloud RDS log audit is disabled misconfiguration detected in code	APPSEC_ALI_38	LOW
AWS CloudTrail log validation is not enabled in all regions misconfiguration detected in code	APPSEC_AWS_36	LOW
AWS EKS control plane logging disabled misconfiguration detected in code	APPSEC_AWS_37	LOW
Amazon MQ Broker logging is not enabled misconfiguration detected in code	APPSEC_AWS_48	MEDIUM
AWS CloudWatch Log groups not configured with definite retention days misconfiguration detected in code	APPSEC_AWS_66	LOW
AWS CloudTrail is not enabled with multi trail and not capturing all management events misconfiguration detected in code	APPSEC_AWS_67	LOW
AWS Redshift database does not have audit logging enabled misconfiguration detected in code	APPSEC_AWS_71	LOW
Global Accelerator does not have Flow logs enabled misconfiguration detected in code	APPSEC_AWS_75	LOW
API Gateway does not have access logging enabled misconfiguration detected in code	APPSEC_AWS_76	LOW
Amazon MSK cluster logging is not enabled misconfiguration detected in code	APPSEC_AWS_80	MEDIUM
AWS Elasticsearch domain logging is not enabled misconfiguration detected in code	APPSEC_AWS_84	MEDIUM
AWS DocumentDB logging is not enabled misconfiguration detected in code	APPSEC_AWS_85	MEDIUM
AWS CloudFront distribution with access logging disabled misconfiguration detected in code	APPSEC_AWS_86	LOW
AWS Elastic Load Balancer v2 (ELBv2) with access log disabled misconfiguration detected in code	APPSEC_AWS_91	LOW
AWS Elastic Load Balancer (Classic) with access log disabled misconfiguration detected in code	APPSEC_AWS_92	LOW
AWS API Gateway V2 has Access Logging is disabled misconfiguration detected in code	APPSEC_AWS_95	LOW
Neptune logging is not enabled misconfiguration detected in code	APPSEC_AWS_101	HIGH
AWS config is not enabled in all regions misconfiguration detected in code	APPSEC_AWS_121	MEDIUM
AWS CloudWatch Log groups encrypted using default encryption key instead of KMS CMK misconfiguration detected in code	APPSEC_AWS_158	LOW
AWS WAF Web Access Control Lists logging is disabled misconfiguration detected in code	APPSEC_AWS_176	LOW
AWS AppSync's logging is disabled misconfiguration detected in code	APPSEC_AWS_193	LOW
AWS AppSync has field-level logging disabled misconfiguration detected in code	APPSEC_AWS_194	LOW
AWS MQBroker audit logging is disabled misconfiguration detected in code	APPSEC_AWS_197	LOW
AWS ECS Cluster does not enable logging of ECS Exec misconfiguration detected in code	APPSEC_AWS_223	LOW
AWS cluster logging is not enabled or client to container communication not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_224	LOW
AWS ACM certificates does not have logging preference misconfiguration detected in code	APPSEC_AWS_234	LOW
AWS MWAA environment has scheduler logs disabled misconfiguration detected in code	APPSEC_AWS_242	LOW
AWS MWAA environment has worker logs disabled misconfiguration detected in code	APPSEC_AWS_243	LOW
AWS MWAA environment has webserver logs disabled misconfiguration detected in code	APPSEC_AWS_244	LOW
AWS CloudTrail logging is disabled misconfiguration detected in code	APPSEC_AWS_251	LOW
AWS CloudTrail does not define an SNS Topic misconfiguration detected in code	APPSEC_AWS_252	LOW
Data Trace is not enabled in the API Gateway Method Settings misconfiguration detected in code	APPSEC_AWS_276	LOW
State machine does not have X-ray tracing enabled misconfiguration detected in code	APPSEC_AWS_284	LOW
Execution history logging is not enabled on the State Machine misconfiguration detected in code	APPSEC_AWS_285	MEDIUM
AWS CodeBuild project not configured with logging configuration misconfiguration detected in code	APPSEC_AWS_314	LOW
Elasticsearch Domain Audit Logging is disabled misconfiguration detected in code	APPSEC_AWS_317	MEDIUM
RDS Cluster log capture is disabled misconfiguration detected in code	APPSEC_AWS_324	MEDIUM
RDS Cluster audit logging for MySQL engine is disabled misconfiguration detected in code	APPSEC_AWS_325	LOW
AWS ECS services have automatic public IP address assignment enabled misconfiguration detected in code	APPSEC_AWS_333	LOW
AWS CloudWatch log groups retention set to less than 365 days misconfiguration detected in code	APPSEC_AWS_338	LOW
RDS instances have performance insights disabled misconfiguration detected in code	APPSEC_AWS_353	LOW
Azure Network Watcher Network Security Group (NSG) flow logs retention is less than 90 days misconfiguration detected in code	APPSEC_AZURE_12	LOW
Azure SQL Server auditing policy is disabled misconfiguration detected in code	APPSEC_AZURE_23	LOW
Azure SQL Server audit log retention is not greater than 90 days misconfiguration detected in code	APPSEC_AZURE_24	HIGH
Azure SQL server send alerts to field value is not set misconfiguration detected in code	APPSEC_AZURE_26	HIGH
Azure storage account logging for queues is disabled misconfiguration detected in code	APPSEC_AZURE_33	LOW
Azure Activity Log retention should not be set to less than 365 days misconfiguration detected in code	APPSEC_AZURE_37	LOW
Azure Monitor log profile does not capture all activities misconfiguration detected in code	APPSEC_AZURE_38	LOW
Azure App service HTTP logging is disabled misconfiguration detected in code	APPSEC_AZURE_63	LOW
App service disables detailed error messages misconfiguration detected in code	APPSEC_AZURE_65	LOW
App service does not enable failed request tracing misconfiguration detected in code	APPSEC_AZURE_66	LOW
Server Parameter 'log_retention' is Set to 'OFF' for PostgreSQL Database Server misconfiguration detected in code	APPSEC_AZURE_146	LOW
Azure SQL Server does not have default auditing policy configured misconfiguration detected in code	APPSEC_AZURE_156	LOW
Azure Built-in logging for Azure function app is disabled misconfiguration detected in code	APPSEC_AZURE_159	LOW
Ledger feature is disabled on the database misconfiguration detected in code	APPSEC_AZURE_224	MEDIUM
GCP Kubernetes Engine Clusters have Cloud Logging disabled misconfiguration detected in code	APPSEC_GCP_1	LOW
GCP VPC Flow logs for the subnet is set to Off misconfiguration detected in code	APPSEC_GCP_26	LOW
GCP PostgreSQL instance with log_checkpoints database flag is disabled misconfiguration detected in code	APPSEC_GCP_51	LOW
GCP PostgreSQL instance database flag log_connections is disabled misconfiguration detected in code	APPSEC_GCP_52	LOW
GCP PostgreSQL instance database flag log_disconnections is disabled misconfiguration detected in code	APPSEC_GCP_53	LOW
GCP PostgreSQL instance database flag log_lock_waits is disabled misconfiguration detected in code	APPSEC_GCP_54	LOW
GCP PostgreSQL instance database flag log_min_messages is not set misconfiguration detected in code	APPSEC_GCP_55	LOW
GCP PostgreSQL instance database flag log_temp_files is not set to 0 misconfiguration detected in code	APPSEC_GCP_56	LOW
GCP PostgreSQL instance database flag log_min_duration_statement is not set to -1 misconfiguration detected in code	APPSEC_GCP_57	LOW
GCP PostgreSQL instance database flag log_hostname is not set to off misconfiguration detected in code	APPSEC_GCP_108	LOW
Log levels of the GCP PostgreSQL database are not set to ERROR or lower misconfiguration detected in code	APPSEC_GCP_109	LOW
pgAudit is disabled for your GCP PostgreSQL database misconfiguration detected in code	APPSEC_GCP_110	LOW
SQL statements of GCP PostgreSQL are not logged misconfiguration detected in code	APPSEC_GCP_111	MEDIUM
The --audit-log-path argument is not set misconfiguration detected in code	APPSEC_K8S_91	MEDIUM
The --audit-log-maxage argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_92	LOW
The --audit-log-maxbackup argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_93	LOW
The --audit-log-maxsize argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_94	LOW
Security policies missing descriptions in Palo Alto Networks devices misconfiguration detected in code	APPSEC_PAN_8	LOW
Log Forwarding Profile not selected for a Palo Alto Networks device security policy rule misconfiguration detected in code	APPSEC_PAN_9	LOW
End-of-session logging disabled on Palo Alto Networks security policies misconfiguration detected in code	APPSEC_PAN_10	LOW
Logging at session start enabled on Palo Alto Networks devices misconfiguration detected in code	APPSEC_PAN_16	LOW
API Gateway stage does not have logging level defined appropriately misconfiguration detected in code	APPSEC2_AWS_4	LOW
AWS CloudTrail trail logs is not integrated with CloudWatch Log misconfiguration detected in code	APPSEC2_AWS_10	LOW
AWS VPC Flow Logs not enabled misconfiguration detected in code	APPSEC2_AWS_11	LOW
AWS RDS Postgres Cluster does not have query logging enabled misconfiguration detected in code	APPSEC2_AWS_27	LOW
AWS Postgres RDS have Query Logging disabled misconfiguration detected in code	APPSEC2_AWS_30	LOW
AWS WAF2 does not have a Logging Configuration misconfiguration detected in code	APPSEC2_AWS_31	LOW
AWS Codecommit is not associated with an approval rule misconfiguration detected in code	APPSEC2_AWS_37	LOW
Domain Name System (DNS) query logging is not enabled for Amazon Route 53 hosted zones misconfiguration detected in code	APPSEC2_AWS_39	LOW
AWS Config Recording is disabled misconfiguration detected in code	APPSEC2_AWS_45	LOW
AWS Config must record all possible resources misconfiguration detected in code	APPSEC2_AWS_48	LOW
An S3 bucket must have a lifecycle configuration misconfiguration detected in code	APPSEC2_AWS_61	MEDIUM
S3 buckets do not have event notifications enabled misconfiguration detected in code	APPSEC2_AWS_62	LOW
AWS Network Firewall is not configured with logging configuration misconfiguration detected in code	APPSEC2_AWS_63	LOW
Azure storage account logging setting for tables is disabled misconfiguration detected in code	APPSEC2_AZURE_20	LOW
Azure storage account logging setting for blobs is disabled misconfiguration detected in code	APPSEC2_AZURE_21	LOW
GCP Log bucket retention policy is not configured using bucket lock misconfiguration detected in code	APPSEC2_GCP_4	LOW
GCP Project audit logging is not configured properly across all services and all users in a project misconfiguration detected in code	APPSEC2_GCP_5	LOW
GCP PostgreSQL instance database flag log_duration is not set to on misconfiguration detected in code	APPSEC2_GCP_13	LOW
GCP PostgreSQL instance database flag log_executor_stats is not set to off misconfiguration detected in code	APPSEC2_GCP_14	LOW
GCP PostgreSQL instance database flag log_parser_stats is not set to off misconfiguration detected in code	APPSEC2_GCP_15	LOW
GCP PostgreSQL instance database flag log_planner_stats is not set to off misconfiguration detected in code	APPSEC2_GCP_16	LOW
GCP PostgreSQL instance database flag log_statement_stats is not set to off misconfiguration detected in code	APPSEC2_GCP_17	LOW
Logging is disabled for Dialogflow agents misconfiguration detected in code	APPSEC2_GCP_29	MEDIUM
Logging for Dialogflow CX agents is disabled misconfiguration detected in code	APPSEC2_GCP_30	MEDIUM
Logging for Dialogflow CX webhooks is disabled misconfiguration detected in code	APPSEC2_GCP_31	MEDIUM