AWS securityhub medium security documentation change
Summary
Corrected log type formatting by removing parentheses and fixed Aurora-PostgreSQL log types (removed 'Upgrade')
Security assessment
Removal of 'Upgrade' from Aurora-PostgreSQL log types corrects documentation inaccuracies. Incorrect log configuration could lead to incomplete monitoring, affecting security visibility and compliance checks. This addresses a potential misconfiguration risk.
Diff
diff --git a/securityhub/latest/userguide/rds-controls.md b/securityhub/latest/userguide/rds-controls.md index 2a9ada8e5..d9ba22a04 100644 --- a//securityhub/latest/userguide/rds-controls.md +++ b//securityhub/latest/userguide/rds-controls.md @@ -258 +258 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * Oracle: (Alert, Audit, Trace, Listener) + * Oracle: Alert, Audit, Trace, Listener @@ -260 +260 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * PostgreSQL: (Postgresql, Upgrade) + * PostgreSQL: Postgresql, Upgrade @@ -262 +262 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * MySQL: (Audit, Error, General, SlowQuery) + * MySQL: Audit, Error, General, SlowQuery @@ -264 +264 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * MariaDB: (Audit, Error, General, SlowQuery) + * MariaDB: Audit, Error, General, SlowQuery @@ -266 +266 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * SQL Server: (Error, Agent) + * SQL Server: Error, Agent @@ -268 +268 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * Aurora: (Audit, Error, General, SlowQuery) + * Aurora: Audit, Error, General, SlowQuery @@ -270 +270 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * Aurora-MySQL: (Audit, Error, General, SlowQuery) + * Aurora-MySQL: Audit, Error, General, SlowQuery @@ -272 +272 @@ This control checks whether an Amazon RDS DB instance is configured to publish t - * Aurora-PostgreSQL: (Postgresql, Upgrade). + * Aurora-PostgreSQL: Postgresql @@ -281 +281 @@ RDS databases should have relevant logs enabled. Database logging provides detai -To publish RDS database logs to CloudWatch Logs, see [Specifying the logs to publish to CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Procedural.UploadtoCloudWatch.html#integrating_cloudwatchlogs.configure) in the _Amazon RDS User Guide_. +For information about publishing RDS database logs to CloudWatch Logs, see [Specifying the logs to publish to CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Procedural.UploadtoCloudWatch.html#integrating_cloudwatchlogs.configure) in the _Amazon RDS User Guide_.