turbot/alicloud_compliance

Control: 6.9 Ensure server parameter 'log_duration is set to 'ON' for PostgreSQL Database Server

Description

Enable log_duration on PostgreSQL Servers.

Remediation

From Console

  1. Logon to RDS Console.
  2. In the upper-left corner, select the region of the target instance.
  3. Locate the target instance, and click the instance ID to enter the Basic Information page.
  4. In the left-side navigation pane, select Parameters.
  5. Click the Edit icon of log_durantion parameter next the Actual Value column.
  6. Enter On as the Actual Value and click Confirm.
  7. Click Apply Changes.
  8. In the message that appears, click Confirm.

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_6_9

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_6_9 --share

SQL

This control uses a named query:

rds_instance_postgresql_log_duration_parameter_on

Tags