Amazon Connect instances should have CloudWatch logging enabled

Confirms that Amazon Connect instances store flow logs in a CloudWatch log group. Flow logs provide real-time details about events in Connect flows, aiding in error analysis, operational monitoring, and security alerting.

service: Connect
severity: Medium
scope: evaluated in every region

How to fix it

Enable CloudWatch logging for your Amazon Connect instances to ensure flow logs are generated and stored.

Navigate to the Amazon Connect console
Select the Connect instance that needs logging enabled
Go to the 'Data streaming' or 'Logging' section
Enable 'Contact flow logs' or 'Flow logs'
Configure the CloudWatch log group destination
Set the appropriate log level and retention period
Save the configuration
Verify that flow logs are being generated in CloudWatch

See which of your accounts this check is failing on.

Book a demo