Redshift cluster should have user activity logging enabled

What it checks

Redshift cluster should have user activity logging enabled

Where it applies

Terraform: aws_redshift_cluster

CloudFormation: AWS::Redshift::Cluster

How to fix it

1. Add an aws_redshift_logging resource with cluster_identifier pointing at this cluster and log_destination_type = "s3" (or "cloudwatch") to capture connection, user activity, and query logs.

Frameworks

• AWS FSBP Redshift.4
• SOC 2 CC7.2
• PCI-DSS v4.0.1/10.2.1
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules