Opportunity Name:
RDS Disable CloudWatch Log Export
AWS Resource Type:
Amazon RDS (Instances and Clusters)
Opportunity Description
Amazon RDS allows database logs to be exported to CloudWatch for monitoring and debugging. While useful, this feature can lead to unnecessary costs when non-critical log exports are enabled for databases that don’t require continuous monitoring.
This CloudFix Finder identifies RDS instances and clusters with CloudWatch log exports enabled and estimates the cost savings from disabling these exports. Disabling unnecessary log exports can significantly reduce CloudWatch ingestion and storage costs without affecting the availability of logs on the RDS instance itself.
Criteria for Identifying the Opportunity
-
The resource is an Amazon RDS instance or cluster
-
The resource exists and is in an 'available' state
-
At least one CloudWatch log export is currently enabled
-
The annualized CloudWatch log export cost exceeds $10, based on usage from the last 30 days
-
Log exports are evaluated via
PutLogEventsoperations identified in the AWS Cost and Usage Report (CUR)
Potential Savings (if known)
Savings are equal to the annualized cost of the current CloudWatch log export ingestion and storage. For example, disabling a log export stream costing $0.50/day can save up to $182.50 per year.
What Happens When the Fixer Is Executed?
Note: This is currently a Finder-only opportunity.
Once identified, the recommendation will include:
-
Resource ID and region
-
Type (instance or cluster)
-
Enabled log exports
-
Annualized cost of log ingestion
-
Estimated savings from disabling
Customers can use this information to manually disable log exports via the AWS Console or CLI.
Is It Possible to Roll Back Once CloudFix Implements the Fixer?
Not applicable – the fix is not automated at this time. However, RDS log exports can be re-enabled at any time if needed.
Can CloudFix Implement the Fix Automatically Once I Accept the Recommendation?
Not at present. The recommendation is for manual execution only.
Does This Fix Require Downtime?
No. Disabling CloudWatch log export for RDS does not impact database availability or internal logging. The logs will still be retained within the RDS instance.
Bill Gleeson
Comments