Neptune cluster should have audit logging enabled
What it checks
Neptune cluster: audit logging is not enabled.
Where it applies
Terraform: aws_neptune_cluster
CloudFormation: AWS::Neptune::DBCluster
How to fix it
- Set enable_cloudwatch_logs_exports = ["audit"] on the Neptune cluster.
Frameworks
- AWS FSBP Neptune.2
- SOC 2 CC7.2
- PCI-DSS v4.0.1/10.3.3
- HIPAA 164.312(b)
These mappings are advisory, not an attestation of compliance.