Control: 7.1 Ensure Log Service is set to 'Enabled' on Kubernetes Engine Clusters

Description

Log Service is a complete real-time data logging service on Alibaba Cloud to support collection, shipping, search, storage and analysis for logs. It includes a user interface to call the Log Viewer and an API to management logs pragmatically. Log Service could automatically collect, process, and store your container and audit logs in a dedicated, persistent datastore. Container logs are collected from your containers. Audit logs are collected from the kube-apiserver or the deployed ingress. Events are logs about activity in the cluster, such as the deleting of Pods or Secrets.

Remediation

From Console

Logon to ACK console.
Click Create Kubernetes Cluster and set Enable Log Service to Enabled when creating cluster.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_7_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_7_1 --share

SQL

This control uses a named query:

manual_control

Control: 7.1 Ensure Log Service is set to 'Enabled' on Kubernetes Engine Clusters

Description

Remediation

From Console

Usage

SQL

Tags