Control: 35 RDS DB clusters should have automatic minor version upgrade enabled
Description
This control checks if automatic minor version upgrade is enabled for an Amazon RDS database cluster. The control fails if automatic minor version upgrade isn't enabled for an RDS cluster.
RDS provides automatic minor version upgrade so that you can keep your RDS database cluster up to date. Minor versions can introduce new software features, bug fixes, security patches, and performance improvements. By enabling automatic minor version upgrade on RDS database clusters, the cluster, along with the instances in the cluster, will receive automatic updates to the minor version when new versions are available. The updates are applied automatically during the maintenance window.
Remediation
To enable automatic minor version upgrade on RDS database clusters, see Modifying the DB cluster by using the console, CLI, and API in the Amazon Aurora User Guide.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_35Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_35 --shareSQL
This control uses a named query:
rds_db_cluster_automatic_minor_version_upgrade_enabled