Control: 7.1 Ensure Log Service is set to 'Enabled' on Kubernetes Engine Clusters


Log Service is a complete real-time data logging service on Alibaba Cloud to support collection, shipping, search, storage and analysis for logs. It includes a user interface to call the Log Viewer and an API to management logs pragmatically. Log Service could automatically collect, process, and store your container and audit logs in a dedicated, persistent datastore. Container logs are collected from your containers. Audit logs are collected from the kube-apiserver or the deployed ingress. Events are logs about activity in the cluster, such as the deleting of Pods or Secrets.


From Console

  1. Logon to ACK console.
  2. Click Create Kubernetes Cluster and set Enable Log Service to Enabled when creating cluster.


Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_7_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_7_1 --share


This control uses a named query: