Control: 13 RDS automatic minor version upgrades should be enabled

Description

This control checks whether automatic minor version upgrades are enabled for the RDS database instance.

Enabling automatic minor version upgrades ensures that the latest minor version updates to the relational database management system (RDBMS) are installed. These upgrades might include security patches and bug fixes. Keeping up to date with patch installation is an important step in securing systems.

Remediation

You can enable minor version upgrades for a DB instance from the Amazon RDS console.

To enable automatic minor version upgrades for an existing DB instance

Open the Amazon RDS console.
Choose Databases.
Choose the DB instance to modify.
Choose Modify.
Under Maintenance, select Yes for Auto minor version upgrade.
Choose Continue.
Under Scheduling of modifications, choose when to apply modifications: Apply during the next scheduled maintenance window or Apply immediately.
Choose Modify DB Instance.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_rds_13

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_rds_13 --share

SQL

This control uses a named query:

rds_db_instance_automatic_minor_version_upgrade_enabled

Control: 13 RDS automatic minor version upgrades should be enabled

Description

Remediation

Usage

SQL

Tags