Control: RDS DB instance and cluster enhanced monitoring should be enabled

Description

Enable Amazon Relational Database Service (Amazon RDS) to help monitor Amazon RDS availability. This provides detailed visibility into the health of your Amazon RDS database instances.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.rds_db_instance_and_cluster_enhanced_monitoring_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.rds_db_instance_and_cluster_enhanced_monitoring_enabled --share

SQL

This control uses a named query:

(
  select
    address as resource,
    case
      when (attributes_std -> 'enabled_cloudwatch_logs_exports') is not null then 'ok'
      else 'alarm'
    end status,
    split_part(address, '.', 2) || case
      when (attributes_std -> 'enabled_cloudwatch_logs_exports') is not null then ' ''enabled_cloudwatch_logs_exports'' enabled'
      else ' ''enabled_cloudwatch_logs_exports'' disabled'
    end || '.' reason
  
  , path || ':' || start_line
  from
    terraform_resource
  where
    type = 'aws_db_instance'
)
union
(
  select
    address as resource,
    case
      when (attributes_std -> 'enabled_cloudwatch_logs_exports') is not null then 'ok'
      else 'alarm'
    end status,
    split_part(address, '.', 2) || case
      when (attributes_std -> 'enabled_cloudwatch_logs_exports') is not null then ' ''enabled_cloudwatch_logs_exports'' enabled'
      else ' ''enabled_cloudwatch_logs_exports'' disabled'
    end || '.' reason
  
  , path || ':' || start_line
  from
    terraform_resource
  where
    type = 'aws_rds_cluster'
);

Control: RDS DB instance and cluster enhanced monitoring should be enabled

Description

Usage

SQL

Tags