Query: rds_db_instance_postgres_not_exposed_to_local_file_read_vulnerability

select
  arn as resource,
  case
    when not engine = 'postgres' then 'skip'
    when engine = 'postgres' and engine_version like any (array ['10.11', '10.12', '10.13', '11.6', '11.7', '11.8']) then 'alarm'
    else 'ok'
  end as status,
  case
    when not engine = 'postgres'  then title || ' not PostgreSQL edition.'
    when engine = 'postgres'  and engine_version like any (array ['13.2','13.1','12.6','12.5','12.4','12.3','12.2','11.11','11.10','11.9','11.8','11.7','11.6','11.5','11.4','11.3','11.2','11.1','10.16','10.15','10.14','10.13','10.12','10.11','10.10','10.9','10.7','10.6','10.5','10.4','10.3','10.1','9.6.21','9.6.20','9.6.19','9.6.18','9.6.17','9.6.16','9.6.15','9.6.14','9.6.12','9.6.11','9.6.10','9.6.9','9.6.8','9.6.6','9.6.5','9.6.3','9.6.2','9.6.1','9.5','9.4','9.3']) then title || ' exposed to local file read vulnerability.'
    else title || ' not exposed to local file read vulnerability.'
  end as reason
  
  , region, account_id
from
  aws_rds_db_instance;