Control: 15 RDS DB clusters should be configured for multiple Availability Zones
Description
This control checks whether high availability is enabled for your RDS DB clusters.
RDS DB clusters should be configured for multiple Availability Zones to ensure availability of the data that is stored. Deployment to multiple Availability Zones allows for automated failover in the event of an Availability Zone availability issue and during regular RDS maintenance events.
Remediation
To remediate this control, configure your DB cluster for multiple Availability Zones.
To enable multi-AZ for a DB cluster
- Open the Amazon RDS console.
- In the navigation pane, choose
Databases
, and then choose the DB instance to modify. - Choose
Modify
. TheModify DB Instance
page appears. - Under
Instance Specifications
, setMulti-AZ deployment
toYes
. - Choose Continue and check the summary of modifications.
- Choose
Continue
. - (Optional) Choose
Apply immediately
to apply the changes immediately. Choosing this option can cause an outage in some cases. For more information, see Using the Apply Immediately setting
On the confirmation page, review your changes. If they are correct, choose Modify DB Instance
.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_15
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_15 --share
SQL
This control uses a named query:
rds_db_cluster_multiple_az_enabled