Control: 6 DMS replication instances should have automatic minor version upgrade enabled
Description
This control checks if automatic minor version upgrade is enabled for an AWS DMS replication instance. The control fails if automatic minor version upgrade isn't enabled for a DMS replication instance.
DMS provides automatic minor version upgrade to each supported replication engine so that you can keep your replication instance up-to-date. Minor versions can introduce new software features, bug fixes, security patches, and performance improvements. By enabling automatic minor version upgrade on DMS replication instances, minor upgrades are applied automatically during the maintenance window or immediately if the Apply changes immediately option is chosen.
Remediation
To enable automatic minor version upgrade on DMS replication instances, see Modifying a replication instance in the AWS Database Migration Service User Guide.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_dms_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_dms_6 --shareSQL
This control uses a named query:
select arn as resource, case when auto_minor_version_upgrade then 'ok' else 'alarm' end as status, case when auto_minor_version_upgrade then title || ' automatic minor version upgrade enabled.' else title || ' automatic minor version upgrade disabled.' end as reason , region, account_idfrom aws_dms_replication_instance;