Control: 19 Existing RDS event notification subscriptions should be configured for critical cluster events.

Description

This control checks whether an Amazon RDS event subscription exists that has notifications enabled for the following source type, event category key-value pairs.

DBCluster: ["maintenance","failure"]

RDS event notifications uses Amazon SNS to make you aware of changes in the availability or configuration of your RDS resources. These notifications allow for rapid response. For additional information about RDS event notifications, see Using Amazon RDS event notification in the Amazon RDS User Guide.

Remediation

To subscribe to RDS cluster event notifications

1. Open the Amazon RDS console

2. In the navigation pane, choose Event subscriptions.

3. Under Event subscriptions, choose Create event subscription.

4. In the Create event subscription dialog, do the following:

   a. For Name, enter a name for the event notification subscription.

   b. For Send notifications to, choose an existing Amazon SNS ARN for an SNS topic. To use a new topic, choose create topic to enter the name of a topic and a list of recipients.

   c. For Source type, choose Clusters.

   d. Under Instances to include, select All clusters.

   e. Under Event categories to include, select Specific event categories. The control also passes if you select All event categories.

   f. Select maintenance and failure.

   g. Choose Create.