Description

Detects AWS Elastic Beanstalk environments that have disabled persistent logging features. When persistent logging is disabled, it prevents the retention and monitoring of application logs, which poses security and compliance risks by limiting audit capabilities and incident investigation.

Detection Strategy

• Scans all Elastic Beanstalk environments in the specified AWS region

• Checks if both LogPublicationControl and StreamLogs configuration options are set to 'false'

• Reports a vulnerability when both logging features are disabled for an environment