04 - Redshift Cluster Audit Logging

Ensure your Redshift clusters have audit logs enabled

Ensure that your redshift clusters have audit logging enabled in order to understand who is access your cluster. This is considered a security best practice and should always be done. Ensuring this is enabled will help with NIST, HIPPA, GDPR and PCI-DSS compliance.

Audit & Remediation

Login into your AWS account
Navigate to the Redshift service at: https://console.aws.amazon.com/redshiftv2
On the left hand panel select Clusters.

Select the Cluster hyperlink for the database cluster you would like to check.
Under Maintenance and monitoring scroll down to Audit logging and look under Audit logging to see if this is set to Disabled.
If Audit logging is currently set to Disabled then select the Edit button.

Under Enable audit logging select yes, then select or create the S3 bucket and then confirm.

Repeat the outlined steps for each redshift cluster that you have.

See all of your AWS Redshift Clusters in a single place!

Do you want to see all Redshift Clusters in once place for all regions and all accounts?
Login to our online demo to see exactly what this looks like.
demo.intelligentdiscovery.io

Other Key Features

Inventory

Consolidate your inventory management with consistent and frequent security logs, inventories, and change logs. Dashboard reporting for extensive analytical value.

learn more +

Cost & Usage

Access consolidated capacity, cost, and volume tools in a scaling environment without impacting production or breaking the bank.