Question 1

Is auto_minor_version_upgrade enforced for ACSC Essential Eight?

Accepted Answer

Yes, Ensure that AWS Relational Database Service (RDS) database instances are configured for automatic minor version upgrades. The rule is non-compliant if the value of 'autoMinorVersionUpgrade' is false.

Question 2

Is backup_retention_period enforced for ACSC Essential Eight?

Accepted Answer

Yes, The backup feature of AWS RDS creates backups of your databases and transaction logs.

Question 3

Is cloudwatch_log_group_kms_key_id enforced for ACSC Essential Eight?

Accepted Answer

Yes, To help protect sensitive data at rest, ensure encryption is enabled for your AWS CloudWatch Log Group.

Question 4

Is enabled_cloudwatch_logs_exports enforced for ACSC Essential Eight?

Accepted Answer

Yes, To help with logging and monitoring within your environment, ensure AWS Relational Database Service (AWS RDS) logging is enabled.

Question 5

Is iam_database_authentication_enabled enforced for ACSC Essential Eight?

Accepted Answer

Yes, Checks if an AWS Relational Database Service (AWS RDS) instance has AWS Identity and Access Management (IAM) authentication enabled.

Question 6

Is publicly_accessible enforced for ACSC Essential Eight?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Relational Database Service (AWS RDS) instances are not public.

AWS RDS Terraform module

Terraform Module Source