Description

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that allows setting up and operating message brokers. It was detected that MQ broker {AwsMqBroker} doesn't have log exports feature, therefore logging data is not published to Amazon CloudWatch logs. Without log exports, it may be harder to monitor broker activity.

• 

  Recommended Mitigation

  It is recommended to enable log exports when creating MQ broker, or to reconfigure the logs if the broker already exist, by choosing the relevant broker -> 'Edit' -> under 'CloudWatch Logs' mark the boxes of 'General' and 'Audit'. For more information: <a href="https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/amazon-mq-editing-broker-preferences.html" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/amazon-mq-editing-broker-preferences.html</a> or <a href="https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/amazon-mq-rabbitmq-editing-broker-preferences.html" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/amazon-mq-rabbitmq-editing-broker-preferences.html</a>