Evaluates as Compliant when the log_duration parameter of an ApsaraDB RDS for PostgreSQL database is set to on.
Scenarios
Recording query execution durations on ApsaraDB RDS for PostgreSQL databases helps diagnose issues and meet security auditing requirements.
Risk level
Default risk level: low.
You can change the risk level based on your business requirements.
Compliance evaluation logic
- If the log_duration parameter of each ApsaraDB RDS for PostgreSQL database is set to on, the evaluation result is Compliant.
- If the log_duration parameter of an ApsaraDB RDS for PostgreSQL database is set to off, the evaluation result is Incompliant.
For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
| Item | Description |
| Rule name | rds-postgresql-parameter-log-duration |
| Rule identifier | rds-postgresql-parameter-log-duration |
| Tag | RDS and PostgreSQL |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | ApsaraDB RDS instance |
| Input parameter | None. |
Incompliance remediation
Modify the settings of an ApsaraDB RDS for PostgreSQL database. For more information, see Modify instance parameters.