Control: RDS DB instance automatic minor version upgrade should be enabled

Description

Ensure if Amazon Relational Database Service (RDS) database instances are configured for automatic minor version upgrades. The rule is NON_COMPLIANT if the value of 'autoMinorVersionUpgrade' is false.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.rds_db_instance_automatic_minor_version_upgrade_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.rds_db_instance_automatic_minor_version_upgrade_enabled --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std -> 'auto_minor_version_upgrade') is null then 'ok'
    when (attributes_std -> 'auto_minor_version_upgrade')::boolean then 'ok'
    else 'alarm'
  end status,
  split_part(address, '.', 2) || case
    when (attributes_std -> 'auto_minor_version_upgrade') is null then ' ''auto_minor_version_upgrade'' enabled'
    when (attributes_std -> 'deletion_protection')::boolean then ' ''auto_minor_version_upgrade'' enabled'
    else ' ''auto_minor_version_upgrade'' disabled'
  end || '.' as reason
  
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'aws_db_instance';

Control: RDS DB instance automatic minor version upgrade should be enabled

Description

Usage

SQL

Tags