Control: 2.8 Ensure Cloud Firewall access and security log analysis is enabled
Description
Log Service collects log entries of internet traffic that are protected by Cloud Firewall, and supports real-time log query and analysis. The query results are centrally displayed in dashboards.
Remediation
Perform the following ensure the Cloud Firewall access and security log is enabled:
From Console
- Logon to Cloud Firewall Console.
- In the left-side navigation pane, select
Advanced Features > Log Analysis. - Click
Active Nowon theLog Analysispage. - Select your log storage capacity, and then click
Payto complete the payment. - Go back to
Log Analysispage on Cloud Firewall console. - Click the
Statuson the right side to enable the Log Analysis service.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_2_8Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_2_8 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;