Query: Neptune DB clusters should publish audit logs to CloudWatch Logs

Description

This control checks whether a Neptune DB cluster publishes audit logs to AWS CloudWatch Logs. The control fails if a Neptune DB cluster doesn't publish audit logs to CloudWatch Logs. EnableCloudWatchLogsExport should be set to Audit.

Query

Tables used in this query:

• aws_neptune_db_cluster

Controls using this query:

• 2 Neptune DB clusters should publish audit logs to CloudWatch Logs
• Neptune DB clusters should publish audit logs to CloudWatch Logs

SQL