All checks

Medium Route53 · account

Route 53 public hosted zones should log DNS queries

Confirms that DNS query logging is enabled for Route 53 public hosted zones.

service: Route53
severity: Medium
scope: evaluated once per account

How to fix it

Enable Route 53 query logging for public hosted zones and send logs to CloudWatch Logs.

Open the Amazon Route 53 console.
Choose 'Hosted zones' and select the public hosted zone.
Choose 'Create query logging config' and select a CloudWatch Logs log group.
Save the configuration and verify logs are being delivered.

See which of your accounts this check is failing on.

Book a demo