Control: IAM authentication should be configured for RDS clusters
Description
Checks if an AWS RDS Cluster has AWS Identity and Access Management (IAM) authentication enabled. The rule is non-compliant if an RDS Cluster does not have IAM authentication enabled.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.rds_db_cluster_iam_authentication_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.rds_db_cluster_iam_authentication_enabled --shareSQL
This control uses a named query:
select arn as resource, case when iam_database_authentication_enabled then 'ok' else 'alarm' end as status, case when iam_database_authentication_enabled then title || ' IAM authentication enabled.' else title || ' IAM authentication not enabled.' end as reason , region, account_idfrom aws_rds_db_cluster;