Logging for Redshift clusters should be enabled

Description

Enable logging for your Amazon Redshift cluster.

Rationale

Logging data from Amazon Redshift clusters is helpful when troubleshooting or completing security and compliance audits.

Remediation

From the console

Follow the Amazon Redshift Configuring auditing using the console docs to enable logging, create audit log files, and store them in an Amazon S3 bucket.

From the command line

  1. Run enable-logging with your cluster ID and the S3 bucket where log files are to be stored.

list-buckets.sh

  aws redshift enable-logging
    --cluster-identifier your-cluster-id
    --bucket-name aws-redshift-logs
  
PREVIEWING: may/op-log-enrichment