Query: Network Firewall logging should be enabled

Description

This control checks whether logging is enabled for an AWS Network Firewall firewall. The control fails if logging isn't enabled for at least one log type or if the logging destination doesn't exist.

Query

Tables used in this query:

• aws_networkfirewall_firewall

Controls using this query:

• 2 Network Firewall logging should be enabled
• Network Firewall logging should be enabled

SQL