Legacy Glue job should have continuous CloudWatch logging enabled
What it checks
Glue job uses a version below 5 without enabled continuous CloudWatch logging.
Where it applies
Terraform: aws_glue_job
CloudFormation: AWS::Glue::Job
How to fix it
- Add "--enable-continuous-cloudwatch-log" = "true" and "--enable-job-insights" = "true" to the Glue job default_arguments.
Frameworks
- SOC 2 CC7.2
- HIPAA 164.312(b)
These mappings are advisory, not an attestation of compliance.