Checks whether the SQL audit log feature is enabled for an AnalyticDB for MySQL cluster.
Scenarios
The SQL audit feature of AnalyticDB for MySQL logs data manipulation language (DML) and data definition language (DDL) operations. The logs help you perform fault analysis, behavior analysis, and security auditing to improve database security.
Risk level
Default risk level: medium.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If the SQL audit log feature is enabled for the AnalyticDB for MySQL cluster, the evaluation result is Compliant.
- If the SQL audit log feature is not enabled for the AnalyticDB for MySQL cluster, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see the "Incompliance remediation" section of this topic.
Rule details
| Item | Description |
| Rule name | adb-cluster-audit-log-enabled |
| Rule identifier | adb-cluster-audit-log-enabled |
| Tag | ADB and Cluster |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | AnalyticDB for MySQL clusters |
| Input parameter | None |
Incompliance remediation
Enable the SQL audit log feature for AnalyticDB for MySQL clusters. For more information, see SQL audit.