Neptune Cluster Should Have CloudWatch Log Exports Enabled

More Info:

Checks if an Amazon Neptune cluster has CloudWatch log export enabled for audit logs. The rule is NON_COMPLIANT if a Neptune cluster does not have CloudWatch log export enabled for audit logs.

Risk Level

Low

Address

Monitoring

Compliance Standards

HIPAA,SOC2,HITRUST,NISTCSF,PCIDSS,SEBI

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration of Neptune Cluster not having CloudWatch Log Exports enabled for AWS RDS using AWS CLI, follow these steps:

Enable CloudWatch Logs Exports for Neptune Cluster: Run the following AWS CLI command to enable CloudWatch Logs Exports for your Neptune Cluster:
```
aws neptune modify-db-cluster --db-cluster-identifier your-neptune-cluster-name --cloudwatch-logs-export-configuration EnableLogTypes=["audit","error","slowquery"] --region your-region
```
Replace your-neptune-cluster-name with the actual name of your Neptune Cluster and your-region with the AWS region where your Neptune Cluster is located. You can modify the EnableLogTypes parameter based on your specific requirements.
Verify Configuration: You can verify that CloudWatch Logs Exports have been enabled for your Neptune Cluster by running the following AWS CLI command:
```
aws neptune describe-db-clusters --db-cluster-identifier your-neptune-cluster-name --region your-region
```
Replace your-neptune-cluster-name with the actual name of your Neptune Cluster and your-region with the AWS region where your Neptune Cluster is located. Check the output to ensure that CloudWatch Logs Exports are enabled.
Monitor CloudWatch Logs: Once CloudWatch Logs Exports are enabled, you can monitor the logs in the CloudWatch console to track the audit, error, and slow query logs for your Neptune Cluster.

By following these steps, you can successfully remediate the misconfiguration of Neptune Cluster not having CloudWatch Log Exports enabled for AWS RDS using AWS CLI.

Using Python

To remediate the misconfiguration of Neptune Cluster not having CloudWatch Log Exports enabled for AWS RDS using Python, you can follow these steps:

Import the necessary AWS SDK for Python (Boto3) library:

import boto3

Initialize the Boto3 Neptune client:

neptune = boto3.client('neptune')

Enable CloudWatch Logs Exports for the Neptune Cluster by updating the NeptuneClusterParameterGroup with the appropriate parameter settings:

response = neptune.modify_db_cluster_parameter_group(
    DBClusterParameterGroupName='your-neptune-cluster-parameter-group-name',
    Parameters=[
        {
            'ParameterName': 'neptune_query_logs.log_destination',
            'ParameterValue': 'cloudwatch',
            'ApplyMethod': 'immediate'
        },
        {
            'ParameterName': 'neptune_query_logs.cloudwatch_logs_group',
            'ParameterValue': 'your-cloudwatch-logs-group-name',
            'ApplyMethod': 'immediate'
        },
        {
            'ParameterName': 'neptune_query_logs.enable_logging',
            'ParameterValue': '1',
            'ApplyMethod': 'immediate'
        }
    ]
)

Verify that the CloudWatch Logs Exports have been enabled successfully by checking the response:

if response['ResponseMetadata']['HTTPStatusCode'] == 200:
    print('CloudWatch Logs Exports have been successfully enabled for the Neptune Cluster.')
else:
    print('Failed to enable CloudWatch Logs Exports for the Neptune Cluster. Please check the configuration.')

By following these steps and executing the Python script, you can remediate the misconfiguration of Neptune Cluster not having CloudWatch Log Exports enabled for AWS RDS.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Neptune Cluster Should Have CloudWatch Log Exports Enabled

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation