From 91246c09ba2a47937439378ebe4aa81286947eac Mon Sep 17 00:00:00 2001 From: Prowler Bot Date: Thu, 7 Nov 2024 17:54:23 +0100 Subject: [PATCH] chore(aws): deprecate `glue_etl_jobs_logging_enabled` check (#5677) Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com> --- .../glue_etl_jobs_logging_enabled.metadata.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json b/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json index 59175732d37..0a50c8b1bf7 100644 --- a/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json +++ b/prowler/providers/aws/services/glue/glue_etl_jobs_logging_enabled/glue_etl_jobs_logging_enabled.metadata.json @@ -1,7 +1,7 @@ { "Provider": "aws", "CheckID": "glue_etl_jobs_logging_enabled", - "CheckTitle": "Check if Glue ETL Jobs have logging enabled.", + "CheckTitle": "[DEPRECATED] Check if Glue ETL Jobs have logging enabled.", "CheckType": [ "Software and Configuration Checks/Industry and Regulatory Standards/AWS Foundational Security Best Practices" ], @@ -10,7 +10,7 @@ "ResourceIdTemplate": "arn:partition:glue:region:account-id:job/job-name", "Severity": "medium", "ResourceType": "AwsGlueJob", - "Description": "Ensure that Glue ETL Jobs have CloudWatch logs enabled.", + "Description": "[DEPRECATED] Ensure that Glue ETL Jobs have CloudWatch logs enabled.", "Risk": "Without logging enabled, AWS Glue jobs lack visibility into job activities and failures, making it difficult to detect unauthorized access, troubleshoot issues, and ensure compliance. This may result in untracked security incidents or operational issues that affect data processing.", "RelatedUrl": "https://docs.aws.amazon.com/glue/latest/dg/monitor-continuous-logging.html", "Remediation": { @@ -28,5 +28,5 @@ "Categories": [], "DependsOn": [], "RelatedTo": [], - "Notes": "" + "Notes": "This check is being removed since logs for all AWS Glue jobs are now always sent to Amazon CloudWatch." }