cis-aws-database-9-7

name	cis-aws-database-9.7
description	Ensure Monitoring and Alerting is Enabled
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","neptune","graph-database","monitoring","cloudwatch","alerting"]
cis_id	9.7
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-9.5","cis-aws-database-9.6","cis-aws-database-9.8"]
prerequisites	[]
severity_boost	{}

9.7 Ensure Monitoring and Alerting is Enabled (Manual)

Description

Ensure that monitoring and alerting is enabled for Amazon Neptune clusters to detect performance issues, security incidents, and operational anomalies proactively.

Rationale

Monitoring and alerting provides visibility into Neptune cluster operations, enabling proactive detection of performance issues, security incidents, and abnormal behavior.

Impact

Proper monitoring and alerting enables timely response to critical conditions and helps maintain the security and performance of Neptune clusters.

Audit Procedure

Using AWS Console

1. Sign in to the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.
2. Open the Amazon Neptune Console - Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/neptune/.
3. Select the Neptune Cluster:
   • Choose the Amazon Neptune cluster on which you want to implement monitoring and alerting.
   • Click on the cluster name to access its details page.
4. Set Up Amazon CloudWatch Metrics:
   • In the cluster details page, navigate to the Monitoring or Metrics section.
   • Enable CloudWatch metrics for the Neptune cluster by clicking Enable or Configure.
   • Select the desired metrics to monitor, such as CPU utilization, storage usage, or network throughput.
   • Choose the appropriate granularity and sampling intervals for the metrics.
   • Click Save or Apply Changes to enable CloudWatch metrics for the Neptune cluster.
5. Configure CloudWatch Alarms:
   • In the CloudWatch console, navigate to Alarms in the left-side menu.
   • Click Create alarm to configure alarms based on specific metric thresholds.
   • Select the desired metric to monitor and set the threshold values for triggering an alarm.
   • Define the actions to be taken when the alarm state changes, such as sending notifications or triggering automated actions.
   • Configure the alarm settings, including alarm name, description, and notification recipients.
   • Click Create alarm to save the alarm configuration.
6. Set Up Amazon EventBridge Rules: