API Gateway REST stage should have access logging enabled

What it checks

API Gateway stage: access logs are not configured.

Where it applies

Terraform: aws_api_gateway_stage

CloudFormation: AWS::ApiGateway::Stage

How to fix it

1. Create a CloudWatch log group and set access_log_settings on the stage
2. Use the recommended JSON format fields: requestId, ip, caller, user, status, protocol, latency

Frameworks

• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules