logo

Database

Aws Kafka Cluster Logging Disabled

Description

Detects Amazon MSK (Managed Streaming for Apache Kafka) clusters that have logging disabled. Running Kafka clusters without logging reduces visibility into cluster operations, broker logs, and audit events, making it difficult to monitor for security incidents and troubleshoot issues.

Weakness:

400 - Traceability Loss - AWS

Category: Functionality Abuse

Detection Strategy

    Checks all MSK clusters in the specified AWS region

    Examines the LoggingInfo configuration for each cluster under the Provisioned settings

    Reports a vulnerability if a cluster's LoggingInfo setting is empty or missing

Severity v4.0

0.6

Low

Method ID

CSPM-0FTDG

Technique

CSPM

Target

AWS

Technology

KAFKA

CWE ID(s)

CWE-778