All checks
Medium NetworkFirewall · regional

Network Firewall logging should be enabled

Confirms that logging is enabled for AWS Network Firewall with at least one log destination configured.

service
NetworkFirewall
severity
Medium
scope
evaluated in every region

How to fix it

Enable logging for the Network Firewall with at least one log destination.

  1. Navigate to the VPC console
  2. Select the Network Firewall
  3. Go to 'Logging' settings
  4. Add a log destination (CloudWatch Logs, S3, or Firehose)
  5. Apply the changes

See which of your accounts this check is failing on.

Book a demo