Plugin Title Log Sinks Enabled
Category Logging
Description Ensures a log sink is enabled to export all logs
More Info Log sinks send log data to a storage service for archival and compliance. A log sink with no filter is necessary to ensure that all logs are being properly sent. If logs are sent to a storage bucket, the bucket must exist and bucket versioning should exist.
AWS Link
Recommended Action Ensure a log sink is configured properly with an empty filter and a destination.

Detailed Remediation Steps

Want to scan for this risk automatically?

Get Started Now