DMS replication tasks for the target database should have logging enabled

문서 > Datadog 보안 > OOTB Rules > DMS replication tasks for the target database should have logging enabled

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

This control verifies whether logging is enabled with at least the default severity level (LOGGER_SEVERITY_DEFAULT) for DMS replication tasks of the types TARGET_APPLY and TARGET_LOAD. If logging is disabled for these tasks or the severity level is below LOGGER_SEVERITY_DEFAULT, the control fails. Acceptable logging levels are LOGGER_SEVERITY_DEFAULT, LOGGER_SEVERITY_DEBUG or LOGGER_SEVERITY_DETAILED_DEBUG.

Amazon CloudWatch is used by DMS to capture log information throughout the migration process. By configuring task settings, you can determine which components are logged and the level of detail recorded. Logging is essential for DMS replication tasks, supporting activities such as monitoring, troubleshooting, auditing, performance analysis, error detection, recovery, historical reviews, and reporting.

Remediation

For guidance on configuring replication task logging, please refer to the Viewing and managing AWS DMS task logs section of the AWS Database Migration Service User Guide.