# SEC04-BP01: Configure service and application logging

## Description

Enable logging cho tất cả services.

## Implementation Guidance

- CloudTrail enabled
- VPC Flow Logs enabled
- Application logging structured
- Database audit logging
- Lambda logging configured

## Risk Level

Critical - No logs means no visibility.
