Upcoming Features
No Items in Stack
Browse
Browse

Security Control

Config Rules
Auto Remediation
Amazon GuardDuty
Amazon Inspector
Security Hub
Billing and Cost
S3 Bucket Policies
CloudWatch Alarms & Rules
Logging & Monitoring
Service Control Policies
AWS Systems Manager
Security Groups & NACLs
KMS
IAM Policies

Configuration Packages

Custom VPC Template
Enable Logging Services
Threat Detection
Monitoring & Compliance
Auto Remediation Rules
EC2 Patch Management
Common SCPs Package
PCI DSS Compliance
CIS AWS Benchmark

Service

VPC
S3
EC2
IAM
CloudFormation
Lambda
EMR
DynamoDB
RDS

Security Strategy Guides

EC2 Security Strategy
S3 Security Strategy

Solutions, Guides & Tools

Security Solutions
Security Tools
Close

RDS Security Controls

AWS security controls to help protect Amazon RDS. Controls include IAM policies and Config rules.

ConfigurationSolutions & Tools
16/16
FILTERS
 
Configuration Type
IAM PolicyConfig RuleSecurity Group
IAM Policy
Allows Restoring RDS Databases
RDS
A policy that allows restoring RDS databases. This policy also provides the permissions necessary to complete this action programmatically and in the console.
2 Tags
Allows Tag Owners Full Access to RDS Resources That They Have Tagged
RDS
A policy that allows tag owners full access to RDS resources that they have tagged (Tag key: Owner, Tag Value: <IAM username>). This policy provides the permissions necessary to complete this action using the AWS...
2 Tags
Allows Creation of RDS Instances of Specific Instance Type and Database Engine
RDS
An IAM policy that allows users to only launch RDS instances of a specific instance type and database engine (Default: t2.micro and mysql).
1 Tag
Allow a User to Create a DB Instance That Uses the Specified DB Parameter and Security Groups
RDS
An IAM policy that grants permissions to allow a user to only create a DB instance that must use specific DB parameter group and DB security group.
1 Tag
Prevent a User from Deleting a DB Instance
RDS
An IAM policy that prevents a user from deleting a specific DB instance.
2 Tags
Config Rule
RDS Storage Encrypted Check
RDS
Checks whether storage encryption is enabled for your RDS DB instances.
2 Tags
RDS Multi-AZ HA Enabled Check
RDS
Checks whether high availability is enabled for your RDS DB instances. (Note: This rule does not evaluate Amazon Aurora databases.)
1 Tag
No RDS Instances in Public Subnets Check
RDS
Check that no RDS Instances are in Public Subnet.
0 Tags
RDS Public Snapshots Prohibited Check
RDS
A Config rule that checks if Amazon Relational Database Service (Amazon RDS) snapshots are public. The rule is non-compliant if any existing and new Amazon RDS snapshots are public.
1 Tag
RDS Backup Enabled Check
RDS
A config rule that checks whether RDS DB instances have backups enabled. Optionally, the rule checks the backup retention period and the backup window.
0 Tags
RDS Instances Public Access Prohibited Check
RDS
A config rule that checks whether the Amazon Relational Database Service instances are not publicaly accessible. The rule is NON_COMPLIANT if the publiclyAccessible field is true in the instance configuration item.
0 Tags