MQ Broker should have general logging enabled

Explanation

Logging should be enabled to allow tracing of issues and activity to be investigated more fully. Logs provide additional information and context which is often invalauble during investigation

Possible Impact

Without logging it is difficult to trace issues

Suggested Resolution

Enable general logging

Insecure Example

The following example will fail the AVD-AWS-0071 check.

---
AWSTemplateFormatVersion: 2010-09-09
Description: Bad example
Resources:
  Broker:
    Type: AWS::AmazonMQ::Broker
    Properties:
      Logs:
        General: false


Secure Example

The following example will pass the AVD-AWS-0071 check.

---
AWSTemplateFormatVersion: 2010-09-09
Description: Good example
Resources:
  Broker:
    Type: AWS::AmazonMQ::Broker
    Properties:
      Logs:
        General: true



Getting Started
Services