Overview

A config rule that checks that all methods in Amazon API Gateway stage has logging enabled. The rule is NON_COMPLIANT if logging is not enabled. The rule is NON_COMPLIANT if loggingLevel is neither ERROR nor INFO.

Configuration Templates

Items
1
Size
0.7 KB
Missing Parameters
AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: api-gw-execution-logging-enabled
      Description: >-
        A config rule that checks  that all methods in Amazon API Gateway stage
        has logging enabled. The rule is NON_COMPLIANT if logging is not
        enabled. The rule is NON_COMPLIANT if loggingLevel is neither ERROR nor
        INFO.
      Scope:
        ComplianceResourceTypes:
          - 'AWS::ApiGateway::Stage'
          - 'AWS::ApiGatewayV2::Stage'
      Source:
        Owner: AWS
        SourceIdentifier: API_GW_EXECUTION_LOGGING_ENABLED
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Customize Template

Rule Parameters

 
* Required field

Sources and Documentation

Configuration Source: AWS Documentation

Additional Documentation:

© 2020 asecurecloud Inc. All Rights Reserved.