All checks
Medium EKS · regional

EKS clusters should have audit logging enabled

Ensures EKS clusters have audit logging enabled to record API server activity.

service
EKS
severity
Medium
scope
evaluated in every region

How to fix it

To enable audit logging for your EKS cluster, you need to configure the logging settings.

  1. Navigate to the Amazon EKS console
  2. Select your cluster
  3. Go to the 'Logging' tab
  4. Click 'Edit' to modify logging configuration
  5. Enable 'Audit' log type
  6. Save the configuration to enable audit logging
  7. Verify that audit logs are being sent to CloudWatch Logs

See which of your accounts this check is failing on.

Book a demo