# Source: https://docs.datadoghq.com/security/default_rules/def-000-04d.md

---
title: Step Functions state machines should have logging turned on
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Step Functions state machines should
  have logging turned on
---

# Step Functions state machines should have logging turned on
 
## Description{% #description %}

This control checks whether logging is enabled for an AWS Step Functions state machine. If logging is not turned on, the control fails. If a custom value is set for the `logLevel` parameter, the control passes only if the state machine is configured with the specified logging level.

Enabling logging helps maintain the reliability, availability, and performance of Step Functions by allowing you to gather critical monitoring data from AWS services, which helps with debugging multi-point failures. Defining a logging configuration for Step Functions state machines enables tracking of execution history and outcomes in Amazon CloudWatch Logs, with the option to log only errors or fatal events.

## Remediation{% #remediation %}

For instructions on enabling logging for a Step Functions state machine, refer to [Configure Logging](https://docs.aws.amazon.com/step-functions/latest/dg/cw-logs.html#monitoring-logging-configure) in the AWS Step Functions Developer Guide.