rds-postgresql-logs-to-cloudwatch

Checks if an Amazon PostgreSQL DB instance is configured to publish logs to Amazon CloudWatch Logs. The rule is NON_COMPLIANT if the DB instance is not configured to publish logs to Amazon CloudWatch Logs.

Identifier: RDS_POSTGRESQL_LOGS_TO_CLOUDWATCH

Resource Types: AWS::RDS::DBInstance

Trigger type: Configuration changes

AWS Region: All supported AWS regions

Parameters:

logTypes (Optional)

Type: CSV

Comma-separated list of log types to be published to CloudWatch Logs. Valid values are: 'postgresql', 'upgrade'. Default value is 'postgresql'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.