Control: 24 RDS database clusters should use a custom administrator username
Description
This control checks whether an Amazon RDS database cluster has changed the admin username from its default value. This rule will fail if the admin username is set to the default value.
When creating an Amazon RDS database, you should change the default admin username to a unique value. Default usernames are public knowledge and should be changed during RDS database creation. Changing the default usernames reduces the risk of unintended access.
Remediation
For changing the admin username associated with the Amazon RDS database cluster, create a new RDS database cluster and change the default admin username while creating the database.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_24Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_24 --shareSQL
This control uses a named query:
rds_db_cluster_no_default_admin_name