aws_compliance

Checks if an AWS Relational Database Service (AWS RDS) instance has AWS Identity and Access Management (IAM) authentication enabled.

rds_db_instance_iam_authentication_enabled

hipaa_final_omnibus_security_rule_2013_164_308_a_3_ii_a

164.308(a)(3)(ii)(A) Authorization and/or supervision

hipaa_security_rule_2003_164_308_a_3_ii_a

hipaa_security_rule_2003_164_308_a_4_i

164.308(a)(4)(i) Information access management

hipaa_final_omnibus_security_rule_2013_164_308_a_4_i

nist_800_171_rev_2_3_1_4

3.1.4 Separate the duties of individuals to reduce the risk of malevolent activity without collusion

nist_800_171_rev_2_3_1_5

3.1.5 Employ the principle of least privilege, including for specific security functions and privileged accounts

pci_dss_v40_requirement_7_2_1

7.2.1: An access control model is defined and includes granting access

pci_dss_v40_requirement_7_2_2

7.2.2: Access is assigned to users, including privileged users

pci_dss_v40_requirement_7_2_5

7.2.5: All application and system accounts and related access privileges are assigned and managed

pci_dss_v40_requirement_7_3_1

7.3.1: An access control system(s) is in place that restricts access based on a user's need to know and covers all system components

pci_dss_v40_requirement_7_3_2

7.3.2: The access control system(s) is configured to enforce permissions assigned to individuals, applications, and systems based on job classification and function

pci_dss_v40_requirement_7_3_3

7.3.3: The access control system(s) is set to “deny all” by default

pci_dss_v40_requirement_8_2_7

8.2.7: Accounts used by third parties to access, support, or maintain system components via remote access are managed

pci_dss_v40_requirement_8_2_8

8.2.8: If a user session has been idle for more than 15 minutes, the user is required to re-authenticate to re-activate the terminal or session

pci_dss_v40_requirement_8_3_4

8.3.4: Invalid authentication attempts are limited

pci_dss_v321_requirement_8_7_a

8.7.a Review database and application configuration settings and verify that all users are authenticated prior to access

pci_dss_v321_requirement_8_7_b

8.7.b Examine database and application configuration settings to verify that all user access to, user queries of, and user actions on (for example, move, copy, delete), the database are through programmatic methods only (for example, through stored procedures)

pci_dss_v321_requirement_8_7_c

8.7.c Examine database access control settings and database application configuration settings to verify that user direct access to or queries of databases are restricted to database administrators

pci_dss_v321_requirement_8_7_d

8.7.d Examine database access control settings, database application configuration settings, and the related application IDs to verify that application IDs can only be used by the applications (and not by individual users or other processes)

acsc_essential_eight_ml_2_5_2

ACSC-EE-ML2-5.2: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_3

ACSC-EE-ML2-5.3: Restrict administrative privileges ML2

acsc_essential_eight_ml_3_5_2

ACSC-EE-ML3-5.2: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_3

ACSC-EE-ML3-5.3: Restrict administrative privileges ML3

soc_2_cc_1_3

CC1.3 COSO Principle 3: Management establishes, with board oversight, structures, reporting lines, and appropriate authorities and responsibilities in the pursuit of objectives

nist_csf_pr_ac_1

PR.AC-1

nist_csf_pr_ac_4

PR.AC-4

all_controls_rds

RDS DB instances should have iam authentication enabled

foundational_security_rds_10

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

AWS Compliance

Apache License 2.0

steampipe-mod-aws-compliance

Control: RDS DB instances should have iam authentication enabled

Description

Usage

SQL

Tags