LOW
Source
Trivy
ID
AVD-AWS-0119

SAM State machine must have logging enabled

Logging enables end-to-end debugging and analysis of all state machine activities.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable logging

1
2
3
4
5
6
7
8
9
Resources:
  GoodExample:
    Type: AWS::AWS::Serverless::StateMachine
    Properties:
      Logging:
        Level: ALL
        Destinations:
          - CloudWatchLogsLogGroup:
              LogGroupArn: arn:aws:logs:us-east-1:123456789012:log-group:/aws/states/my-logs:*