All checks
Medium
Aurora PostgreSQL DB clusters should publish logs to CloudWatch Logs
Verifies that Aurora PostgreSQL DB clusters publish the postgresql log to CloudWatch Logs, where it is kept durably and can be searched and alarmed on. The export does not decide what is logged: the log_statement and log_min_duration_statement parameters do.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Databases → the Aurora PostgreSQL cluster → Modify → Log exports
With the AWS CLI
aws rds modify-db-cluster --db-cluster-identifier <db-cluster-identifier> --cloudwatch-logs-export-configuration '{"EnableLogTypes":["postgresql"]}' --region <region>With Terraform
resource "aws_rds_cluster" "this" {
cluster_identifier = var.cluster_identifier
engine = "aurora-postgresql"
enabled_cloudwatch_logs_exports = ["postgresql"]
}See which of your accounts this check is failing on.
Book a demo