Ensure that Logstore data retention period is set 365 days or greater

MédiaNível 2Revisão manualalibaba

Descrição

Ensure Activity Log Retention is set for 365 days or greater Logstore life cycle controls how your activity log is exported and retained. It is recommended to retain your activity log for 365 days or more in order to have time to respond to any incidents. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Perform below steps to ensure the log retention is set to 365 days or greater. 1. Logon to SLS Console. 2. In the Projects section, click the target project name. On the page that appears, click the plus sign (+) next to the search box. 3. In the dialog box that appears, check whether the Permanent Storage is turned on, which means the log data will be stored permanently, or else 4. Ensure the Data Retention Period is set to 365 or greater.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Perform below steps to ensure the log retention is set to 365 days or greater. 1. Logon to SLS Console. 2. Find the project in the Projects section, and then click the target project name. 3. On the page that appears, click Modify a Logstore icon next to the Logstore, and then choose Modify. 4. On the page that appears, click Modify, modify the Data Retention Period, to 365 or greater and then click Save.

Propriedades

Sistemas operacionais: Qualquer
Tags: alibabalogging
Referência: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.23 Ensure that Logstore data retention period is set 365 days or greater