Logging and monitoring

Log monitoring is not set up for Management Console authentication failures

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Log Service is a real-time data logging service that supports collection, consumption, shipping, search, and analysis of logs. It was detected that log monitoring and alarm are not set up for management console authentication failures. Monitoring failed console logins may help to detect a credential brute force attempt and to provide an indicator, source IP for example, for other such events.