Logging and monitoring

RDS SQL auditing is disabled

Platform(s)
Compliance Frameworks
  • AliCloud CIS
  • ,
  • Brazilian General Data Protection (LGPD)
  • ,
  • CCM-CSA
  • ,
  • CCPA
  • ,
  • cis_8
  • ,
  • coppa
  • ,
  • CPRA
  • ,
  • Data Security Posture Management (DSPM) Best Practices
  • ,
  • hdh
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • Mitre ATT&CK
  • ,
  • New Zealand Information Security Manual
  • ,
  • NIST 800-171
  • ,
  • NIST 800-53
  • ,
  • PDPA
  • ,
  • pipeda

Description

Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. SQL Explorer is a feature in the RDS service which tracks and audits events on your MySQL database. These logs can be used to check suspect behavior or anomalies on the database. It was found that the instance '{AliCloudRdsDbInstance}' has SQL Explorer disabled.