All checks
Medium
Amazon DocumentDB clusters should publish audit logs to CloudWatch Logs
Verifies that DocumentDB clusters publish audit logs to CloudWatch Logs. Audit logging captures authentication attempts, collection drops, index creation, and other significant events.
- service
- DocumentDB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable audit logging for your Amazon DocumentDB cluster by configuring CloudWatch Logs export for audit logs.
- Open the Amazon DocumentDB console.
- Choose 'Clusters' from the navigation pane.
- Select the cluster you want to modify.
- Choose 'Modify'.
- In the 'Log exports' section, select 'audit' to enable audit logs.
- Choose 'Continue' and then 'Modify cluster'.
See which of your accounts this check is failing on.
Book a demo