From ce1e9de10402da1c8ee1e76e87f2e2592cec8685 Mon Sep 17 00:00:00 2001 From: Sergio Garcia <38561120+sergargar@users.noreply.github.com> Date: Thu, 7 Nov 2024 10:25:32 -0500 Subject: [PATCH] chore(aws): deprecate `glue_etl_jobs_logging_enabled` check (#5670) --- .../glue_etl_jobs_logging_enabled.metadata.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json b/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json index 59175732d3..0a50c8b1bf 100644 --- a/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json +++ b/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json @@ -1,7 +1,7 @@ { "Provider": "aws", "CheckID": "glue_etl_jobs_logging_enabled", - "CheckTitle": "Check if Glue ETL Jobs have logging enabled.", + "CheckTitle": "[DEPRECATED] Check if Glue ETL Jobs have logging enabled.", "CheckType": [ "Software and Configuration Checks/Industry and Regulatory Standards/AWS Foundational Security Best Practices" ], @@ -10,7 +10,7 @@ "ResourceIdTemplate": "arn:partition:glue:region:account-id:job/job-name", "Severity": "medium", "ResourceType": "AwsGlueJob", - "Description": "Ensure that Glue ETL Jobs have CloudWatch logs enabled.", + "Description": "[DEPRECATED] Ensure that Glue ETL Jobs have CloudWatch logs enabled.", "Risk": "Without logging enabled, AWS Glue jobs lack visibility into job activities and failures, making it difficult to detect unauthorized access, troubleshoot issues, and ensure compliance. This may result in untracked security incidents or operational issues that affect data processing.", "RelatedUrl": "https://docs.aws.amazon.com/glue/latest/dg/monitor-continuous-logging.html", "Remediation": { @@ -28,5 +28,5 @@ "Categories": [], "DependsOn": [], "RelatedTo": [], - "Notes": "" + "Notes": "This check is being removed since logs for all AWS Glue jobs are now always sent to Amazon CloudWatch." }