logo

Database

Aws Audit Logging Disabled

Description

Detects AWS Redshift clusters that have audit logging disabled. Audit logging is essential for monitoring database activities, tracking user actions, and conducting security investigations. Disabled audit logging creates a security blind spot that can hinder incident response and compliance efforts.

Weakness:

400 - Traceability Loss - AWS

Category: Functionality Abuse

Detection Strategy

    Examines each Redshift cluster in the specified AWS region

    Checks if the LoggingEnabled property is set to false for the cluster

    Reports a vulnerability if audit logging is not enabled for any Redshift cluster