Severity: Medium
Description: The control ensure audit logging status is enabled. Audit logging option records usage information for Redshift Cluster. This information includes queries executed. Connection attempt requests, logging other data that can be proven useful for security, compliance, troubleshooting, and in audits reporting.
Remediation Steps:
Perform following to modify database encryption on Redshift cluster :
Login to the AWS Management Console at https://console.aws.amazon.com.
Navigate to Redshift console.
In the navigation pane, choose CLUSTERS, then choose the cluster that you want to modify for encryption.
Go to Maintenance and Monitoring Tab.
Under the "Audit logging" Choose Edit.
Enable the option for audit logging.
In the Database configuration section, choose to modify customer
Choose the Modify cluster.
Important:
Reference: