Alibaba Cloud RDS instance has log_disconnections disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_ALI_36
Category - Subcategory	Logging - Disabled or missing
Provider	ALIBABA_CLOUD
Severity	LOW
Framework	Terraform

Impact

This rule ensures that the log_disconnections parameter is enabled for Alibaba Cloud RDS instances. Enabling this parameter helps log disconnection events, which can be useful for monitoring, troubleshooting, and auditing purposes. Capturing these logs provides insights into connection behaviors and can help detect anomalies or potential issues with database connections.

Disabling this parameter may result in a lack of visibility into disconnection events, potentially hindering diagnostic and monitoring efforts.

How to Fix

Resource: alicloud_rds_instance

• Arguments: log_disconnections

To mitigate this issue, ensure the log_disconnections parameter is set to on in the RDS instance configuration.

Example: [source,go]

resource "alicloud_rds_instance" "example" { ... parameter {

• name = "log_disconnections"

• value = "on" } }

---