Control: 5 RDS DB instances should be configured with multiple Availability Zones
Description
This control checks whether high availability is enabled for your RDS DB instances.
RDS DB instances should be configured for multiple Availability Zones (AZs). This ensures the availability of the data stored. Multi-AZ deployments allow for automated failover if there is an issue with Availability Zone availability and during regular RDS maintenance.
Remediation
To remediate this issue, update your DB instances to enable multiple Availability Zones.
To enable multiple Availability Zones for a DB instance
- Open the Amazon RDS console.
- In the navigation pane, choose
Databases
, and then choose the DB instance that you want to modify. - Choose
Modify
. TheModify DB Instance
page appears. - Under
Instance Specifications
, setMulti-AZ deployment
toYes
. - Choose
Continue
and then check the summary of modifications. - (Optional) Choose
Apply immediately
to apply the changes immediately. Choosing this option can cause an outage in some cases. For more information, see Using the Apply Immediately setting. - On the confirmation page, review your changes. If they are correct, choose
Modify DB Instance
to save your changes.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_5
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_5 --share
SQL
This control uses a named query:
rds_db_instance_multiple_az_enabled