Description

Some AWS services (Such as EC2, ELB or S3) do not correctly set the logging property, which avoids the recording of log files. These files are useful to identify and trace malicious actions or anomalous behaviors. Alternatively, the log files do not have enough detail level.

Impact

Perform harmful actions without raising an alert.

Recommendation

Set the logging property in AWS instances that could handle important data.

Threat

Authenticated attacker from the Internet.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes