Amazon_Redshift_11

Ensure Redshift Cluster Audit Logging is Enabled

Description

Audit logging should be enabled for Redshift clusters for security and troubleshooting purposes.

Remediation

1. Login to the AWS Management Console.

2. Go to Redshift dashboard.

3. In the left navigation panel, under Redshift Dashboard, click Clusters.

4. Choose the Redshift cluster that you want to modify then click on its identifier listed in the Cluster column.

5. On the selected cluster configuration page, click the Database dropdown button from the dashboard top menu then click Configure Audit Logging.

6. Inside the Configure Audit Logging dialog box, perform the following actions:

  1. For Enable Audit Logging select Yes.
  2. For S3 Bucket select one of the following options based on your preferences:
    • Select Use Existing to store the log files within an existing S3 bucket and choose the name of this bucket from the Bucket*dropdown list. (Optional) In the S3 Key Prefixbox you can provide a unique prefix for the log file names.
    • Select Create New to create a new S3 bucket for log files storage and provide a name for it in the New Bucket Name* box. (Optional) In the S3 Key Prefix box you can provide a unique prefix for the log file names generated by Redshift.
  3. Click Save to enable the feature. The Audit Logging Enabledstatus should change to Yes.

Service

Redshift

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!