AWS RDS Terraform module
Upstream version 7.2.2
13 controls from Registry requirements
Terraform Module Source
nistcsfv11.compliance.tf/terraform-aws-modules/rds/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365PR.PT-1
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabledPR.DS-1
Framework requirement
RDS DB instances and clusters should have enhanced monitoring enabled
rds_db_instance_and_cluster_enhanced_monitoring_enabledDE.CM-2
Framework requirement
RDS DB instance automatic minor version upgrade should be enabled
rds_db_instance_automatic_minor_version_upgrade_enabledPR.IP-1
Framework requirement
RDS DB instance backup should be enabled
rds_db_instance_backup_enabledID.BE-5
Framework requirement
RDS DB instances backup retention period should be greater than or equal to 7
rds_db_instance_backup_retention_period_less_than_7ID.BE-5
Framework requirement
RDS DB instances should have deletion protection enabled
rds_db_instance_deletion_protection_enabledRC.RP-1
Framework requirement
RDS DB instance encryption at rest should be enabled
rds_db_instance_encryption_at_rest_enabledPR.DS-1
Framework requirement
RDS DB instances should have iam authentication enabled
rds_db_instance_iam_authentication_enabledPR.AC-4
Framework requirement
RDS DB instances should have logging enabled
rds_db_instance_logging_enabledPR.PT-1
Framework requirement
RDS DB instances should have multiple AZ enabled
rds_db_instance_multiple_az_enabledID.BE-5
Framework requirement
RDS database instances should use a custom administrator username
rds_db_instance_no_default_admin_namePR.IP-1
Framework requirement
RDS DB instances should not use public subnet
rds_db_instance_no_public_subnetPR.AC-3
Framework requirement