Hey folks,

I was wondering if anyone had any experience with stateRAMP (based on NIST 800 - 53) requirements in regards to AWS. There is great debate within the company whether we will need to turn on VPC flow logs and Route53 DNS resolver logging globally, with cost implications being the primary concern.

While I personally believe these should be turned on anyway for best practice, there is management pushback due to cost and we're being asked if this is truly necessary for StateRAMP compliance.

Any insight/clarification would be highly appreciated!