Control: 6.4 Ensure that 'Auditing' Retention is 'greater than 6 months'
Description
Database SQL Audit Retention should be configured to be greater than 90 days.
Remediation
From Console
- Logon to RDS Console.
- In the upper-left corner, select the region of the target instance.
- Locate the target instance, and click the instance ID.
- In the left-side navigation pane, select
SQL Explore. - Click
Service Settingbutton on the top right corner. - In the service setting page, enable
Activate SQL Explore, set the storage duration as‘6 months’ or longer.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_6_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_6_4 --shareSQL
This control uses a named query:
rds_instance_sql_audit_retention_period_180_days