Control: 5 RDS DB instances should be configured with multiple Availability Zones

Description

This control checks whether high availability is enabled for your RDS DB instances.

RDS DB instances should be configured for multiple Availability Zones (AZs). This ensures the availability of the data stored. Multi-AZ deployments allow for automated failover if there is an issue with Availability Zone availability and during regular RDS maintenance.

Remediation

To remediate this issue, update your DB instances to enable multiple Availability Zones.

To enable multiple Availability Zones for a DB instance

Open the Amazon RDS console.
In the navigation pane, choose Databases, and then choose the DB instance that you want to modify.
Choose Modify. The Modify DB Instance page appears.
Under Instance Specifications, set Multi-AZ deployment to Yes.
Choose Continue and then check the summary of modifications.
(Optional) Choose Apply immediately to apply the changes immediately. Choosing this option can cause an outage in some cases. For more information, see Using the Apply Immediately setting.
On the confirmation page, review your changes. If they are correct, choose Modify DB Instance to save your changes.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_rds_5

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_rds_5 --share

SQL

This control uses a named query:

select
  arn as resource,
  case
    when engine ilike any (array ['%aurora-mysql%', '%aurora-postgres%']) then 'skip'
    when multi_az then 'ok'
    else 'alarm'
  end as status,
  case
    when engine ilike any (array ['%aurora-mysql%', '%aurora-postgres%']) then title || ' cluster instance.'
    when multi_az then title || ' Multi-AZ enabled.'
    else title || ' Multi-AZ disabled.'
  end as reason
  
  , region, account_id
from
  aws_rds_db_instance;

Control: 5 RDS DB instances should be configured with multiple Availability Zones

Description

Remediation

Usage

SQL

Tags