Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
AWS
Loading policies...

Policy: AWS > Redshift > Cluster > Audit Logging

Define the Audit Logging settings required for AWS > Redshift > Cluster.

AWS > Redshift > Cluster provides detailed audit logs information about connection, user and user activity logs in your database. These logs help you to monitor the database for security and troubleshooting purposes, which is a process often referred to as database auditing. The logs are stored in Amazon S3 buckets.

The control changes the audit logging setting of the AWS > Redshift > Cluster and also changes the enable_user_activity_logging parameter of the attached parameter group if sub policy AWS > Redshift > Cluster > Audit Logging > User Activity Logging is set. Also the control triggers reboot if the attached parameter group is modified.

Targets

This policy targets the following resource types:

  • AWS > Redshift > Cluster

Related Policies

  • Bucket
  • Key Prefix
  • User Activity Logging

Controls

Setting this policy configures this control:

  • AWS > Redshift > Cluster > Audit Logging

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Disabled

  • Check: Enabled

  • Check: Enabled to Audit Logging > Bucket

  • Enforce: Disabled

  • Enforce: Enabled to Audit Logging > Bucket
Examples [YAML]
  • Skip

Category

  • Resource > Logging

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/turbot#/control/categories/resourceLogging
    • Policy Type URI
    • tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging
    • GraphQL
    • query policyType(id: "tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging'") { … }
    • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging"
      • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-redshift#/policy/types/clusterAuditLogging"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
182
Mods
519
Resource Types
8,948
Policies
3,489
Controls
1,929
Quick Actions
547
IAM