EKS cluster logging is not enabled
- Query id: 37304d3f-f852-40b8-ae3f-725e87a7cedf
- Query name: EKS cluster logging is not enabled
- Platform: Terraform
- Severity: Low
- Category: Observability
- URL: Github
Description¶
Amazon EKS control plane logging is not enabled
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
variable "cluster_name" {
default = "example"
type = string
}
resource "aws_eks_cluster" "positive1" {
depends_on = [aws_cloudwatch_log_group.example]
name = var.cluster_name
}
Code samples without security vulnerabilities¶
Negative test num. 1 - tf file
variable "cluster_name" {
default = "example"
type = string
}
resource "aws_eks_cluster" "negative1" {
depends_on = [aws_cloudwatch_log_group.example]
enabled_cluster_log_types = ["api", "audit", "authenticator", "controllerManager", "scheduler"]
name = var.cluster_name
}