Control: 6.4 Ensure that 'Auditing' Retention is 'greater than 6 months'
Description
Database SQL Audit Retention should be configured to be greater than 90 days.
Remediation
From Console
- Logon to RDS Console.
- In the upper-left corner, select the region of the target instance.
- Locate the target instance, and click the instance ID.
- In the left-side navigation pane, select
SQL Explore. - Click
Service Settingbutton on the top right corner. - In the service setting page, enable
Activate SQL Explore, set the storage duration as‘6 months’ or longer.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_6_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_6_4 --shareSQL
This control uses a named query:
select arn as resource, case when sql_collector_retention > 180 then 'ok' else 'alarm' end as status, title || ' SQL audit enabled with retention period ' || sql_collector_retention || ' days.' as reason , account_id as account_id, region as regionfrom alicloud_rds_instance;