Neptune logging is not enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_101
Category - Subcategory	Logging - Disabled or missing
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

This rule ensures that logging is enabled for Amazon Neptune clusters. Enabling logging for your Neptune clusters is critical for auditing and monitoring purposes. It helps in capturing database activities that can be useful for debugging and compliance requirements. This check validates that enable_cloudwatch_logs_exports includes the required log types.

How to Fix

Resource: aws_neptune_cluster

• Arguments: enable_cloudwatch_logs_exports

[source,go]

resource "aws_neptune_cluster" "Pike" { cluster_identifier = var.DBClusterIdentifier

...

• enable_cloudwatch_logs_exports = ["audit"] }

---

---