Control: 2.6 Ensure Anti-DDoS access and security log service is enabled
Description
Alibaba Cloud Anti-DDoS Pro supports integration with Log Service for website access log (including HTTP flood attack logs) to enable the real-time analysis and reporting center features. The log collected can be monitored on a central dashboard on Log Service.
Remediation
Perform the following to ensure the Anti-DDoS access and security log is enabled:
- Logon to Anti-DDoS Pro Console, and go to the
Log > Full Logpage. - Select the specific website for which you want to enable the
Full Logservice and click to turn on theStatusswitch.
Default Value:
Logging is disabled.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v200_2_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v200_2_6 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;