Control: 3.1 Ensure audit log retention period is set to 365 days
Description
Ensuring audit logs are kept for 365 days.
Remediation
From Console
- Go to the Tenancy Details page.
- Click
Edit Audit Retention Policy. - Set the
AUDIT RETENTION PERIODto 365. - Click
Submit.
From Command Line
- Update the
retention-period-daysto 365
oci audit config update --retention-period-days 365 --compartment-id <compartment OCID>
Usage
Run the control in your terminal:
powerpipe control run oci_compliance.control.cis_v120_3_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run oci_compliance.control.cis_v120_3_1 --shareSQL
This control uses a named query:
identity_tenancy_audit_log_retention_period_365_days