Control: 5.1 Ensure AWS Batch is configured with AWS Cloudwatch Logs
Description
You can configure Batch jobs to send log information to CloudWatch Logs.
This enables you to view different logs from all your jobs in one convenient location.
Remediation
From the Console:
- Login to the AWS Console using https://console.aws.amazon.com/batch/.
- In the left column under Console settings, Click on
Permissions. - In the Job logs section click on
Edit. - Click the
Authorize Batch to use CloudWatch. - Click Save.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cis_compute_service_v100_5_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cis_compute_service_v100_5_1 --shareSQL
This control uses a named query:
manual_control