DocDB does not have audit logs enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_104
Category - Subcategory	Storage - Alerting
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Enabling audit logs for Amazon DocumentDB (DocDB) can help you to monitor and track activity within your DocDB cluster. Audit logs provide a record of database activity, including details about the activity itself (e.g., which database was accessed, what type of operation was performed), as well as information about the user or application that initiated the activity.

How to Fix

Resource: AWS::DocDB::DBClusterParameterGroup

• Arguments: Parameters.audit_logs [source,go]

---

Resources: DocDBParameterGroupEnabled: Type: "AWS::DocDB::DBClusterParameterGroup" Properties: ...

• Parameters:
• audit_logs: "enabled" ...

---