turbot/terraform_aws_compliance
Loading controls...

Control: API Gateway REST and WebSocket API logging should be enabled

Description

This control checks whether all stages of an Amazon API Gateway REST or WebSocket API have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.apigateway_stage_logging_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.apigateway_stage_logging_enabled --share

SQL

This control uses a named query:

apigateway_stage_logging_enabled

Tags