Skip to main content

🧠 AWS API Gateway API Execution Logging in CloudWatch is not enabled - prod.logic.yaml🟒

Uses​

Test Results πŸŸ’β€‹

Generated at: 2026-02-10T22:32:31.259514040Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒test1βœ”οΈ 99βœ”οΈ isDisappeared(CA10__disappearanceTime__c)βœ”οΈ null
🟒test2βœ”οΈ 199βœ”οΈ extract('CA10__protocolType__c') == 'HTTP'βœ”οΈ null
🟒test3βœ”οΈ 299βœ”οΈ CA10__AWS_API_Gateway_Stages__r.has(INCOMPLIANT)βœ”οΈ null
🟒test4βœ”οΈ 300βœ”οΈ otherwiseβœ”οΈ null

Generation Bundle​

FileMD5
Open/ce/ca/aws/apigateway/api-execution-logging/policy.yamlB7FFBE831BC47D31D42C2A0A0192F55C
Open/ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml99A4D96F4631D05420881A0D6E4873A4
Open/ce/ca/aws/apigateway/api-execution-logging/test-data.jsonF06FEB4B3D78B3C2B7BB9C6183F63E22
Open/types/CA10__CaAwsApiGatewayRestApi__c/object.extracts.yaml746F09341E8149BAD88C53E274DB1DD5
Open/types/CA10__CaAwsApiGatewayStage__c/object.extracts.yaml4C63240D980BDDAFE321E6FFAC8F9034

Available Commands​

repo-manager policies generate FULL /ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/apigateway/api-execution-logging/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsApiGatewayRestApi__c"
importExtracts:
- file: "/types/CA10__CaAwsApiGatewayStage__c/object.extracts.yaml"
- file: "/types/CA10__CaAwsApiGatewayRestApi__c/object.extracts.yaml"
testData:
- file: test-data.json
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "HTTP APIs do not support execution logs."
check:
IS_EQUAL:
left:
EXTRACT: "CA10__protocolType__c"
right:
TEXT: "HTTP"
- status: "INCOMPLIANT"
currentStateMessage: "At least one API stage does not have CloudWatch execution logs enabled."
remediationMessage: "Enable CloudWatch execution logs for the API stage."
check:
RELATED_LIST_HAS:
relationshipName: "CA10__AWS_API_Gateway_Stages__r"
status: "INCOMPLIANT"
otherwise:
status: "COMPLIANT"
currentStateMessage: "All API stages have CloudWatch execution logs enabled."
relatedLists:
- relationshipName: "CA10__AWS_API_Gateway_Stages__r"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "CloudWatch execution logs are not enabled for this API stage."
remediationMessage: "Enable CloudWatch execution logs for this API stage."
check:
IS_EMPTY:
arg:
EXTRACT: "CA10__cloudWatchLogLevel__c"
- status: "INCOMPLIANT"
currentStateMessage: "CloudWatch execution logs are turned off for this API stage."
remediationMessage: "Enable CloudWatch execution logs for this API stage."
check:
IS_EQUAL:
left:
EXTRACT: "CA10__cloudWatchLogLevel__c"
right:
TEXT: "OFF"
otherwise:
status: "COMPLIANT"
currentStateMessage: "CloudWatch execution logs are enabled for this API stage."