Control: RDS DB instances CA certificates should not expire within next 7 days

Description

Ensure RDS DB instances CA certificates are not getting expired within the next 7 days.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.rds_db_instance_ca_certificate_expires_7_days

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.rds_db_instance_ca_certificate_expires_7_days --share

SQL

This control uses a named query:

select
  arn as resource,
  case
    when extract(day from (to_timestamp(certificate ->> 'ValidTill','YYYY-MM-DDTHH:MI:SS')) - current_timestamp) <= '7' then 'alarm'
    else 'ok'
  end as status,
    title || ' expires ' || to_char(to_timestamp(certificate ->> 'ValidTill','YYYY-MM-DDTHH:MI:SS'), 'DD-Mon-YYYY') ||
    ' (' || extract(day from (to_timestamp(certificate ->> 'ValidTill','YYYY-MM-DDTHH:MI:SS')) - current_timestamp) || ' days).'
  as reason
  
  , region, account_id
from
  aws_rds_db_instance;

Control: RDS DB instances CA certificates should not expire within next 7 days

Description

Usage

SQL

Tags