Is log_field_log_level enforced for PCI DSS v4.0?

Yes, This control checks whether an AWS AppSync API has field-level logging turned on. The control fails if the field resolver log level is set to None. Unless you provide custom parameter values to indicate that a specific log type should be enabled, Security Hub produces a passed finding if the field resolver log level is either ERROR or ALL.

terraform-aws-modules/appsync/aws for PCI DSS v4.0

Registry

Sign inStart free trial

Controls

1 control from PCI DSS v4.0 apply to this module.

Control	Clause	Change
AppSync GraphQL APIs should have field-level logging enabledappsync_graphql_api_field_level_logging_enabled 5.3.4	5.3.4