aws-mq-broker-log-event
Broker logs may expose usernames, client IDs, destinations, connection strings, and authentication failures.
Where it sits
| location | CloudWatch Logs Amazon MQ general/audit log event.message |
|---|
| location kind | log_field |
|---|
| data kinds | credential password sensitive_data pii |
|---|
| emits edge | ContainsSecret |
|---|
| service | Amazon MQ (aws:mq) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | logs:FilterLogEvents |
|---|
| response path | Events[].Message |
|---|
| encoding | string |
|---|
| params | {"LogGroupName": "\u003cbroker-log-group\u003e"} |
|---|
Required permissions
mq:DescribeBroker
logs:FilterLogEvents
References