Global Accelerator should enable flow logs

What it checks

Global Accelerator should enable flow logs

Where it applies

Terraform: aws_globalaccelerator_accelerator

CloudFormation: AWS::GlobalAccelerator::Accelerator

How to fix it

1. Set attributes { flow_logs_enabled = true } and provide flow_logs_s3_bucket / flow_logs_s3_prefix pointing at an S3 bucket carrying the AWSLogDeliveryWrite bucket policy. Global Accelerator flow logs publish to S3 (view them in the US West (Oregon) Region).

Frameworks

• NIST 800-53 rev5 SI-4
• SOC 2 CC7.2

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules