turbot/aws_compliance

Control: Neptune DB clusters should publish audit logs to CloudWatch Logs

Description

This control checks whether a Neptune DB cluster publishes audit logs to AWS CloudWatch Logs. The control fails if a Neptune DB cluster doesn't publish audit logs to CloudWatch Logs. EnableCloudWatchLogsExport should be set to Audit.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.neptune_db_cluster_audit_logging_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.neptune_db_cluster_audit_logging_enabled --share

SQL

This control uses a named query:

neptune_db_cluster_audit_logging_enabled

Tags