{
  "Provider": "aws",
  "CheckID": "directoryservice_directory_log_forwarding_enabled",
  "CheckTitle": "Directory Service monitoring with CloudWatch logs.",
  "CheckType": [],
  "ServiceName": "directoryservice",
  "SubServiceName": "",
  "ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
  "Severity": "medium",
  "ResourceType": "AwsDirectoryService",
  "Description": "Directory Service monitoring with CloudWatch logs.",
  "Risk": "As a best practice, monitor your organization to ensure that changes are logged. This helps you to ensure that any unexpected change can be investigated and unwanted changes can be rolled back.",
  "RelatedUrl": "https://docs.aws.amazon.com/directoryservice/latest/admin-guide/incident-response.html",
  "Remediation": {
    "Code": {
      "CLI": "",
      "NativeIaC": "",
      "Other": "",
      "Terraform": ""
    },
    "Recommendation": {
      "Text": "It is recommended that that the export of logs is enabled.",
      "Url": "https://docs.aws.amazon.com/directoryservice/latest/admin-guide/incident-response.html"
    }
  },
  "Categories": [],
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
