Controls
11 controls from NIST SP 800-53 Rev 5 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 AC-16(b) | AC-16(b) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled AU-9(3) | AU-9(3) | |
| RDS DB instances and clusters should have enhanced monitoring enabledrds_db_instance_and_cluster_enhanced_monitoring_enabled AU-12(3) | AU-12(3) | |
| RDS DB instance automatic minor version upgrade should be enabledrds_db_instance_automatic_minor_version_upgrade_enabled MA-2(2) | MA-2(2) | |
| RDS DB instance backup should be enabledrds_db_instance_backup_enabled CP-1(2) | CP-1(2) | |
| RDS DB instances backup retention period should be greater than or equal to 7rds_db_instance_backup_retention_period_less_than_7 CP-1(2) | CP-1(2) | |
| RDS DB instances should be integrated with CloudWatch logsrds_db_instance_cloudwatch_logs_enabled AC-2(4) | AC-2(4) | |
| RDS DB instances should have deletion protection enabledrds_db_instance_deletion_protection_enabled None | None | |
| RDS DB instance encryption at rest should be enabledrds_db_instance_encryption_at_rest_enabled AU-9(3) | AU-9(3) | |
| RDS DB instances should have multiple AZ enabledrds_db_instance_multiple_az_enabled None | None | |
| RDS DB instances should not use public subnetrds_db_instance_no_public_subnet AC-2(6) | AC-2(6) |