cis-aws-database-6-6

name	cis-aws-database-6.6
description	Ensure Monitoring and Alerting is Enabled
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","memorydb","redis","monitoring","cloudwatch","alerting","eventbridge"]
cis_id	6.6
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-6.4","cis-aws-database-6.5"]
prerequisites	[]
severity_boost	{}

6.6 Ensure Monitoring and Alerting is Enabled (Manual)

Description

Implementing monitoring and alerting on Amazon MemoryDB allows you to proactively detect and respond to any performance issues, security events, or operational anomalies.

Rationale

This helps in ensuring that everything in the system is secure and if there is an unusual activity that takes place it addresses the issues quickly and efficiently.

Impact

Enabling monitoring and alerting has a positive impact in the business operations when the issue is identified and addressed accordingly.

Audit Procedure

Using AWS Console

1. Sign into the AWS Management Console

   • Sign into the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the Amazon MemoryDB Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/memorydb/.

3. Select the Cluster

   • Choose the Amazon MemoryDB cluster for which you want to implement monitoring and alerting. Click on the cluster name to access its details page.

4. Enable Amazon CloudWatch

   • In the cluster details page, navigate to the Monitoring or CloudWatch section.
   • Click on Enable to enable CloudWatch monitoring for the cluster.
   • Select the appropriate CloudWatch metric categories to monitor, such as CPU utilization, memory utilization, network traffic, and storage capacity.
   • Configure the desired granularity and period for metric collection.
   • Click Enable or Save to enable CloudWatch monitoring for the cluster.

5. Set Up CloudWatch Alarms

   • In the CloudWatch console, navigate to Alarms in the left-side menu.
   • Click on Create Alarm to set up a new alarm.
   • Select the CloudWatch metric related to the aspect you want to monitor, such as CPU utilization or memory utilization.
   • Configure the alarm threshold based on your desired criteria, such as setting CPU utilization above a certain percentage.
   • Define the actions to be taken when the alarm is triggered.
   • Click Create Alarm to create the CloudWatch alarm.