💼 [Neptune.2] Neptune DB clusters should publish audit logs to CloudWatch Logs
Description
Amazon Neptune and Amazon CloudWatch are integrated so that you can gather and
analyze performance metrics. Neptune automatically sends metrics to CloudWatch
and also supports CloudWatch Alarms. Audit logs are highly customizable. When
you audit a database, each operation on the data can be monitored and logged
to an audit trail, including information about which database cluster is
accessed and how.
Similar
- AWS Security Hub
- Internal
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 AC-2(4) Account Management _ Automated Audit Actions | | 13 | 15 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AC-4(26) Information Flow Enforcement _ Audit Filtering Actions | | | 8 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AC-6(9) Least Privilege _ Log Use of Privileged Functions | | 17 | 18 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-2 Event Logging | 4 | | 16 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-3 Content of Audit Records | 3 | 13 | 27 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-6(1) Audit Record Review, Analysis, and Reporting _ Automated Process Integration | | 1 | 1 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-6(3) Audit Record Review, Analysis, and Reporting _ Correlate Audit Record Repositories | | | 7 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-6(4) Audit Record Review, Analysis, and Reporting _ Central Review and Analysis | | | 7 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-6(5) Audit Record Review, Analysis, and Reporting _ Integrated Analysis of Audit Records | | | | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-7(1) Audit Record Reduction and Report Generation _ Automatic Processing | | 1 | 1 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-9(7) Protection of Audit Information _ Store on Component with Different Operating System | | | | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-10 Non-repudiation | 5 | | 6 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 AU-12 Audit Record Generation | 4 | 47 | 64 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 CA-7 Continuous Monitoring | 6 | | 9 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SC-7(9) Boundary Protection _ Restrict Threatening Outgoing Communications Traffic | | | 9 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SI-3(8) Malicious Code Protection _ Detect Unauthorized Commands | | | 4 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SI-4(5) System Monitoring _ System-generated Alerts | | | | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SI-4(20) System Monitoring _ Privileged Users | | | 4 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SI-7(8) Software, Firmware, and Information Integrity _ Auditing Capability for Significant Events | | | 7 | |
| 💼 NIST SP 800-53 Revision 5 → 💼 SI-20 Tainting | | | | |
| 💼 PCI DSS v4.0.1 → 💼 10.3.3 Audit log files, including those for external-facing technologies, are promptly backed up to a secure, central, internal log server(s) or other media that is difficult to modify. | | | | |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|