ACK cluster with log service disabled

Logging and monitoring

ACK cluster with log service disabled

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AliCloud CIS

Description

Web Application Firewall (WAF) provides end-to-end security protection for your websites or apps. WAF effectively identifies and filters out malicious web traffic, and then forwards normal traffic to your origin server. This protects your origin server from attacks and ensures data and service security. It was detected that the domain {AliCloudWafDomain} does not have log service enabled. Log Service collects log entries that record visits and attacks on websites protected by Alibaba Cloud WAF and supports real-time log query and analysis.

Recommended Mitigation

Is is recommended to enable log service on your domains. For more information on the log service WAF feature, see: https://www.alibabacloud.com/help/en/web-application-firewall/latest/overview-of-the-log-service-for-waf-feature

ACK cluster with log service disabled

Description

Need help?