Enable API Gateway Stage Logging Rule

Rule Description:

Troubleshooting Steps:

2. 1.
   Lack of visibility into API activity, making it difficult to track and investigate potential security incidents.
4. 2.
   Inability to comply with auditing requirements set by regulatory frameworks such as NIST 800-53 Revision 5.
6. 3.
   Difficulty in identifying and troubleshooting API-related issues and errors.

Necessary Codes (if applicable):

2. 1.
   Open the AWS Management Console and navigate to the API Gateway service.
4. 2.
   Select the desired API Gateway instance.
6. 3.
   Choose the "Stages" tab.
8. 4.
   Select the particular stage you want to enable logging for.
10. 5.
    Click on the "Logs" tab.
12. 6.
    Under the "Enable CloudWatch Logs" section, toggle the switch to enable stage logging.
14. 7.
    Choose the desired log format and configures other options as per your requirements.
16. 8.
    Select an existing CloudWatch Logs group or create a new one.
18. 9.
    Click on the "Save Changes" button to apply the changes.

Remediation Steps:

2. 1.
   Log in to your AWS Management Console.
4. 2.
   Navigate to the API Gateway service.
6. 3.
   Select the API Gateway instance that needs stage logging enabled.
8. 4.
   In the left sidebar, click on "Stages."
10. 5.
    Choose the specific stage you want to enable logging for.
12. 6.
    Click on the "Logs" tab.
14. 7.
    Under the "Enable CloudWatch Logs" section, toggle the switch to enable stage logging.
16. 8.
    Choose the desired log format (e.g., JSON) or customize it based on your requirements.
18. 9.
    Configure other options such as data sampling rate, logging level, etc., as needed.
20. 10.
    Select an existing CloudWatch Logs group or create a new one to store the logged data.
22. 11.
    Click on the "Save Changes" button to save your configuration and enable stage logging for the selected stage.