AWS RDS Aurora Terraform module
Upstream version 10.2.0
7 controls from Registry requirements
Terraform Module Source
nistcsfv11.compliance.tf/terraform-aws-modules/rds-aurora/awsBehavioral Summary
This module modifies 4 variable defaults and makes 0 resource changes from the upstream module. All changes are driven by compliance controls and can be reviewed in detail below.
Your Code Impact
If you are migrating from the upstream module, the enforced default changes mean your existing configurations will automatically gain compliance controls. Variables you have explicitly set will continue to use your values. Review the diff below to understand exactly what changes.
Compared to
terraform-aws-modules/rds-aurora/aws@10.2.04 changesVariables Changed
4| Variable | Upstream | CTF | Reason | Control |
|---|---|---|---|---|
| backtrack_window | - | 72 | This control checks whether AWS Aurora clusters have backtracking enabled. Backups help you to recover more quickly from a security incident. They also strengthen the resilience of your systems. Aurora backtracking reduces the time to recover a database to a point in time. It does not require a database restore to so. | rds_db_cluster_aurora_backtracking_enabled |
| cloudwatch_log_group_retention_in_days | 7 | 365 | Ensure a minimum duration of event log data is retained for your log groups to help with troubleshooting and forensics investigations. | cloudwatch_log_group_retention_period_365 |
| deletion_protection | - | true | This control checks whether RDS clusters have deletion protection enabled. This control is intended for RDS DB instances. However, it can also generate findings for Aurora DB instances, Neptune DB instances, and AWS DocumentDB clusters. If these findings are not useful,then you can suppress them. | rds_db_cluster_deletion_protection_enabled |
| iam_database_authentication_enabled | - | true | Checks if an AWS RDS Cluster has AWS Identity and Access Management (IAM) authentication enabled. The rule is non-compliant if an RDS Cluster does not have IAM authentication enabled. | rds_db_cluster_iam_authentication_enabled |