API Gateway stage has neither X-Ray nor access logs

What it checks

API Gateway stage has neither X-Ray nor access logs

Where it applies

Terraform: aws_api_gateway_stage

CloudFormation: AWS::ApiGateway::Stage

How to fix it

1. Set xray_tracing_enabled = true on the stage.
2. Add access_log_settings pointing at a CloudWatch log group with the recommended JSON format.

Frameworks

• AWS FSBP APIGateway.3
• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules