All checks
Medium
Aurora MySQL DB clusters should have audit logging enabled
Confirms that Aurora MySQL DB clusters have audit logging enabled through the server_audit_logging cluster parameter, so the engine can record logins, data changes and schema changes for security and compliance review.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Parameter groups → the DB cluster parameter group attached to the cluster
With the AWS CLI
aws rds modify-db-cluster-parameter-group --db-cluster-parameter-group-name <db-cluster-parameter-group-name> --parameters ParameterName=server_audit_logging,ParameterValue=1,ApplyMethod=immediate --region <region>With Terraform
resource "aws_rds_cluster_parameter_group" "this" {
name = var.parameter_group_name
family = var.family
parameter {
name = "server_audit_logging"
value = "1"
}
}See which of your accounts this check is failing on.
Book a demo