🧠 AWS RDS Instance database logging is not enabled - prod.logic.yaml🟢
- Contextual name: 🧠 prod.logic.yaml🟢
- ID:
/ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml - Tags:
Uses
Test Results 🟢
Generated at: 2026-01-31T12:02:12.207539700Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| 🟢 | 001 | ✔️ 99 | ✔️ isDisappeared(CA10__disappearanceTime__c) | ✔️ null |
| 🟢 | 002 | ✔️ 399 | ✔️ extract('CA10__enabledCloudWatchLogsExports__c').isNotEmpty() | ✔️ null |
| 🟢 | 003 | ✔️ 400 | ✔️ otherwise | ✔️ null |
Generation Bundle
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/rds/instance-cloudwatch-logs-export/policy.yaml | DFEC3B4A5B6E513CE98870F4BA8C664A |
| Open | /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml | 7545B5C826FBE10ED8604CC8FA7D45D6 |
| Open | /ce/ca/aws/rds/instance-cloudwatch-logs-export/test-data.json | B880CDF33965C84FB5B86F513B17AF12 |
| Open | /types/CA10__CaAwsDbInstance__c/object.extracts.yaml | E3FA5A211AA9AD2418645BB09047D3D3 |
Available Commands
repo-manager policies generate FULL /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/instance-cloudwatch-logs-export/prod.logic.yaml
Content
---
inputType: "CA10__CaAwsDbInstance__c"
testData:
- file: test-data.json
importExtracts:
- file: /types/CA10__CaAwsDbInstance__c/object.extracts.yaml
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Instance is not available."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10__status__c"
right:
TEXT: "available"
- status: "INAPPLICABLE"
currentStateMessage: "This policy doesn't apply to Cluster Instances."
check:
NOT_EMPTY:
arg:
EXTRACT: "CA10__clusterArn__c"
- status: "COMPLIANT"
currentStateMessage: "The RDS Instance is configured to publish logs to CloudWatch."
check:
NOT_EMPTY:
arg:
EXTRACT: "CA10__enabledCloudWatchLogsExports__c"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The RDS Instance is not configured to publish logs to CloudWatch."
remediationMessage: "Modify the RDS instance to enable CloudWatch logs."