Control: 3.1 Ensure audit log retention period is set to 365 days
Description
Ensuring audit logs are kept for 365 days.
Remediation
From Console
- Go to the Tenancy Details page.
- Click
Edit Audit Retention Policy. - Set the
AUDIT RETENTION PERIODto 365. - Click
Submit.
From Command Line
- Execute the following command:
oci audit config update --retention-period-days 365 --compartment-id <compartment OCID>
Usage
Run the control in your terminal:
powerpipe control run oci_compliance.control.cis_v110_3_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run oci_compliance.control.cis_v110_3_1 --shareSQL
This control uses a named query:
select id as resource, case when retention_period_days < 365 then 'alarm' else 'ok' end as status, 'Audit log retention period set to ' || retention_period_days || '.' as reason , tenant_name as tenantfrom oci_identity_tenancy;