Logging for Redshift clusters should be enabled

Documentos > Datadog Security > OOTB Rules > Logging for Redshift clusters should be enabled

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

Enable logging for your Amazon Redshift cluster.

Rationale

Logging data from Amazon Redshift clusters is helpful when troubleshooting or completing security and compliance audits.

Remediation

From the console

Follow the Amazon Redshift Configuring auditing using the console docs to enable logging, create audit log files, and store them in an Amazon S3 bucket.

From the command line

Run enable-logging with your cluster ID and the S3 bucket where log files are to be stored.

list-buckets.sh

  aws redshift enable-logging
    --cluster-identifier your-cluster-id
    --bucket-name aws-redshift-logs
  