Mod: aws-rds
The aws-rds mod consists of 10 resource types, 207 policies, 79 controls and 86 actions.
Recommended Version
Version
5.28.0
Released On
Nov 28, 2024
Depends On
Resource Types
- AWS > RDS
- AWS > RDS > DB Cluster
- AWS > RDS > DB Cluster Parameter Group
- AWS > RDS > DB Cluster Snapshot [Manual]
- AWS > RDS > DB Instance
- AWS > RDS > DB Parameter Group
- AWS > RDS > DB Snapshot [Manual]
- AWS > RDS > Global Cluster
- AWS > RDS > Option Group
- AWS > RDS > Subnet Group
Controls
- AWS > RDS > DB Cluster > Active
- AWS > RDS > DB Cluster > Approved
- AWS > RDS > DB Cluster > Backup Retention Period
- AWS > RDS > DB Cluster > CMDB
- AWS > RDS > DB Cluster > Configured
- AWS > RDS > DB Cluster > Copy Tags to Snapshot
- AWS > RDS > DB Cluster > Deletion Protection
- AWS > RDS > DB Cluster > Discovery
- AWS > RDS > DB Cluster > Logs Export Configuration
- AWS > RDS > DB Cluster > Parameter Group
- AWS > RDS > DB Cluster > Schedule
- AWS > RDS > DB Cluster > Tags
- AWS > RDS > DB Cluster > Usage
- AWS > RDS > DB Cluster Parameter Group > Active
- AWS > RDS > DB Cluster Parameter Group > Approved
- AWS > RDS > DB Cluster Parameter Group > CMDB
- AWS > RDS > DB Cluster Parameter Group > Configured
- AWS > RDS > DB Cluster Parameter Group > Discovery
- AWS > RDS > DB Cluster Parameter Group > Tags
- AWS > RDS > DB Cluster Parameter Group > Usage
- AWS > RDS > DB Cluster Snapshot [Manual] > Active
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved
- AWS > RDS > DB Cluster Snapshot [Manual] > CMDB
- AWS > RDS > DB Cluster Snapshot [Manual] > Configured
- AWS > RDS > DB Cluster Snapshot [Manual] > Discovery
- AWS > RDS > DB Cluster Snapshot [Manual] > Tags
- AWS > RDS > DB Cluster Snapshot [Manual] > Trusted Access
- AWS > RDS > DB Cluster Snapshot [Manual] > Usage
- AWS > RDS > DB Instance > Active
- AWS > RDS > DB Instance > Approved
- AWS > RDS > DB Instance > Auto Minor Version Upgrade
- AWS > RDS > DB Instance > Backup Retention Period
- AWS > RDS > DB Instance > CMDB
- AWS > RDS > DB Instance > Configured
- AWS > RDS > DB Instance > Copy Tags to Snapshot
- AWS > RDS > DB Instance > Deletion Protection
- AWS > RDS > DB Instance > Discovery
- AWS > RDS > DB Instance > Logs Export Configuration
- AWS > RDS > DB Instance > Multi-AZ
- AWS > RDS > DB Instance > Parameter Group
- AWS > RDS > DB Instance > Performance Insights
- AWS > RDS > DB Instance > Publicly Accessible
- AWS > RDS > DB Instance > Schedule
- AWS > RDS > DB Instance > Tags
- AWS > RDS > DB Instance > Usage
- AWS > RDS > DB Parameter Group > Active
- AWS > RDS > DB Parameter Group > Approved
- AWS > RDS > DB Parameter Group > CMDB
- AWS > RDS > DB Parameter Group > Configured
- AWS > RDS > DB Parameter Group > Discovery
- AWS > RDS > DB Parameter Group > Tags
- AWS > RDS > DB Parameter Group > Usage
- AWS > RDS > DB Snapshot [Manual] > Active
- AWS > RDS > DB Snapshot [Manual] > Approved
- AWS > RDS > DB Snapshot [Manual] > CMDB
- AWS > RDS > DB Snapshot [Manual] > Configured
- AWS > RDS > DB Snapshot [Manual] > Discovery
- AWS > RDS > DB Snapshot [Manual] > Tags
- AWS > RDS > DB Snapshot [Manual] > Trusted Access
- AWS > RDS > DB Snapshot [Manual] > Usage
- AWS > RDS > Global Cluster > Active
- AWS > RDS > Global Cluster > Approved
- AWS > RDS > Global Cluster > CMDB
- AWS > RDS > Global Cluster > Discovery
- AWS > RDS > Option Group > Active
- AWS > RDS > Option Group > Approved
- AWS > RDS > Option Group > CMDB
- AWS > RDS > Option Group > Configured
- AWS > RDS > Option Group > Discovery
- AWS > RDS > Option Group > Tags
- AWS > RDS > Option Group > Usage
- AWS > RDS > Stack
- AWS > RDS > Subnet Group > Active
- AWS > RDS > Subnet Group > Approved
- AWS > RDS > Subnet Group > CMDB
- AWS > RDS > Subnet Group > Configured
- AWS > RDS > Subnet Group > Discovery
- AWS > RDS > Subnet Group > Tags
- AWS > RDS > Subnet Group > Usage
IAM Roles
Quick Actions
- AWS > RDS > DB Cluster > Disable Copy Tags To Snapshot
- AWS > RDS > DB Cluster > Disable Deletion Protection
- AWS > RDS > DB Cluster > Enable Copy Tags To Snapshot
- AWS > RDS > DB Cluster > Enable Deletion Protection
- AWS > RDS > DB Cluster > Set Tags
- AWS > RDS > DB Cluster > Skip alarm for Active control
- AWS > RDS > DB Cluster > Skip alarm for Active control [90 days]
- AWS > RDS > DB Cluster > Skip alarm for Approved control
- AWS > RDS > DB Cluster > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Cluster > Skip alarm for Tags control
- AWS > RDS > DB Cluster > Skip alarm for Tags control [90 days]
- AWS > RDS > DB Cluster > Snapshot and delete from AWS
- AWS > RDS > DB Cluster > Start DB Cluster
- AWS > RDS > DB Cluster > Stop DB Cluster
- AWS > RDS > DB Cluster Parameter Group > Delete from AWS
- AWS > RDS > DB Cluster Parameter Group > Set Tags
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Active control
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Active control [90 days]
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Approved control
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Tags control
- AWS > RDS > DB Cluster Parameter Group > Skip alarm for Tags control [90 days]
- AWS > RDS > DB Cluster Snapshot [Manual] > Delete from AWS
- AWS > RDS > DB Cluster Snapshot [Manual] > Set Tags
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Active control
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Active control [90 days]
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Approved control
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Tags control
- AWS > RDS > DB Cluster Snapshot [Manual] > Skip alarm for Tags control [90 days]
- AWS > RDS > DB Instance > Disable Auto Minor Versions Upgrade
- AWS > RDS > DB Instance > Disable Copy Tags To Snapshot
- AWS > RDS > DB Instance > Disable Deletion Protection
- AWS > RDS > DB Instance > Disable Multi AZ
- AWS > RDS > DB Instance > Enable Auto Minor Versions Upgrade
- AWS > RDS > DB Instance > Enable Copy Tags To Snapshot
- AWS > RDS > DB Instance > Enable Deletion Protection
- AWS > RDS > DB Instance > Enable Multi AZ
- AWS > RDS > DB Instance > Reboot DB Instance
- AWS > RDS > DB Instance > Set Tags
- AWS > RDS > DB Instance > Skip alarm for Active control
- AWS > RDS > DB Instance > Skip alarm for Active control [90 days]
- AWS > RDS > DB Instance > Skip alarm for Approved control
- AWS > RDS > DB Instance > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Instance > Skip alarm for Tags control
- AWS > RDS > DB Instance > Skip alarm for Tags control [90 days]
- AWS > RDS > DB Instance > Snapshot and delete from AWS
- AWS > RDS > DB Instance > Start DB Instance
- AWS > RDS > DB Instance > Stop DB Instance
- AWS > RDS > DB Parameter Group > Delete from AWS
- AWS > RDS > DB Parameter Group > Set Tags
- AWS > RDS > DB Parameter Group > Skip alarm for Active control
- AWS > RDS > DB Parameter Group > Skip alarm for Active control [90 days]
- AWS > RDS > DB Parameter Group > Skip alarm for Approved control
- AWS > RDS > DB Parameter Group > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Parameter Group > Skip alarm for Tags control
- AWS > RDS > DB Parameter Group > Skip alarm for Tags control [90 days]
- AWS > RDS > DB Snapshot [Manual] > Delete from AWS
- AWS > RDS > DB Snapshot [Manual] > Set Tags
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Active control
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Active control [90 days]
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Approved control
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Approved control [90 days]
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Tags control
- AWS > RDS > DB Snapshot [Manual] > Skip alarm for Tags control [90 days]
- AWS > RDS > Global Cluster > Delete from AWS
- AWS > RDS > Global Cluster > Skip alarm for Active control
- AWS > RDS > Global Cluster > Skip alarm for Active control [90 days]
- AWS > RDS > Global Cluster > Skip alarm for Approved control
- AWS > RDS > Global Cluster > Skip alarm for Approved control [90 days]
- AWS > RDS > Option Group > Delete from AWS
- AWS > RDS > Option Group > Set Tags
- AWS > RDS > Option Group > Skip alarm for Active control
- AWS > RDS > Option Group > Skip alarm for Active control [90 days]
- AWS > RDS > Option Group > Skip alarm for Approved control
- AWS > RDS > Option Group > Skip alarm for Approved control [90 days]
- AWS > RDS > Option Group > Skip alarm for Tags control
- AWS > RDS > Option Group > Skip alarm for Tags control [90 days]
- AWS > RDS > Subnet Group > Delete from AWS
- AWS > RDS > Subnet Group > Set Tags
- AWS > RDS > Subnet Group > Skip alarm for Active control
- AWS > RDS > Subnet Group > Skip alarm for Active control [90 days]
- AWS > RDS > Subnet Group > Skip alarm for Approved control
- AWS > RDS > Subnet Group > Skip alarm for Approved control [90 days]
- AWS > RDS > Subnet Group > Skip alarm for Tags control
- AWS > RDS > Subnet Group > Skip alarm for Tags control [90 days]
Policies
- AWS > RDS > API Enabled
- AWS > RDS > Approved Regions [Default]
- AWS > RDS > DB Cluster > Active
- AWS > RDS > DB Cluster > Active > Age
- AWS > RDS > DB Cluster > Active > Budget
- AWS > RDS > DB Cluster > Active > Last Modified
- AWS > RDS > DB Cluster > Approved
- AWS > RDS > DB Cluster > Approved > Budget
- AWS > RDS > DB Cluster > Approved > Custom
- AWS > RDS > DB Cluster > Approved > Encryption at Rest
- AWS > RDS > DB Cluster > Approved > Encryption at Rest > Customer Managed Key
- AWS > RDS > DB Cluster > Approved > Regions
- AWS > RDS > DB Cluster > Approved > Usage
- AWS > RDS > DB Cluster > Backup Retention Period
- AWS > RDS > DB Cluster > Backup Retention Period > Days
- AWS > RDS > DB Cluster > CMDB
- AWS > RDS > DB Cluster > Configured
- AWS > RDS > DB Cluster > Configured > Claim Precedence
- AWS > RDS > DB Cluster > Configured > Source
- AWS > RDS > DB Cluster > Copy Tags to Snapshot
- AWS > RDS > DB Cluster > Deletion Protection
- AWS > RDS > DB Cluster > Logs Export Configuration
- AWS > RDS > DB Cluster > Logs Export Configuration > Log Types
- AWS > RDS > DB Cluster > Parameter Group
- AWS > RDS > DB Cluster > Parameter Group > Name
- AWS > RDS > DB Cluster > Regions
- AWS > RDS > DB Cluster > Schedule
- AWS > RDS > DB Cluster > Schedule Tag
- AWS > RDS > DB Cluster > Tags
- AWS > RDS > DB Cluster > Tags > Template
- AWS > RDS > DB Cluster > Usage
- AWS > RDS > DB Cluster > Usage > Limit
- AWS > RDS > DB Cluster Parameter Group > Active
- AWS > RDS > DB Cluster Parameter Group > Active > Age
- AWS > RDS > DB Cluster Parameter Group > Active > Last Modified
- AWS > RDS > DB Cluster Parameter Group > Approved
- AWS > RDS > DB Cluster Parameter Group > Approved > Custom
- AWS > RDS > DB Cluster Parameter Group > Approved > Regions
- AWS > RDS > DB Cluster Parameter Group > Approved > Usage
- AWS > RDS > DB Cluster Parameter Group > CMDB
- AWS > RDS > DB Cluster Parameter Group > Configured
- AWS > RDS > DB Cluster Parameter Group > Configured > Claim Precedence
- AWS > RDS > DB Cluster Parameter Group > Configured > Source
- AWS > RDS > DB Cluster Parameter Group > Regions
- AWS > RDS > DB Cluster Parameter Group > Tags
- AWS > RDS > DB Cluster Parameter Group > Tags > Template
- AWS > RDS > DB Cluster Parameter Group > Usage
- AWS > RDS > DB Cluster Parameter Group > Usage > Limit
- AWS > RDS > DB Cluster Snapshot [Manual] > Active
- AWS > RDS > DB Cluster Snapshot [Manual] > Active > Age
- AWS > RDS > DB Cluster Snapshot [Manual] > Active > Budget
- AWS > RDS > DB Cluster Snapshot [Manual] > Active > Last Modified
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved > Budget
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved > Custom
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved > Regions
- AWS > RDS > DB Cluster Snapshot [Manual] > Approved > Usage
- AWS > RDS > DB Cluster Snapshot [Manual] > CMDB
- AWS > RDS > DB Cluster Snapshot [Manual] > Configured
- AWS > RDS > DB Cluster Snapshot [Manual] > Configured > Claim Precedence
- AWS > RDS > DB Cluster Snapshot [Manual] > Configured > Source
- AWS > RDS > DB Cluster Snapshot [Manual] > Regions
- AWS > RDS > DB Cluster Snapshot [Manual] > Tags
- AWS > RDS > DB Cluster Snapshot [Manual] > Tags > Template
- AWS > RDS > DB Cluster Snapshot [Manual] > Trusted Access
- AWS > RDS > DB Cluster Snapshot [Manual] > Trusted Access > Accounts
- AWS > RDS > DB Cluster Snapshot [Manual] > Usage
- AWS > RDS > DB Cluster Snapshot [Manual] > Usage > Limit
- AWS > RDS > DB Instance > Active
- AWS > RDS > DB Instance > Active > Age
- AWS > RDS > DB Instance > Active > Budget
- AWS > RDS > DB Instance > Active > Last Modified
- AWS > RDS > DB Instance > Approved
- AWS > RDS > DB Instance > Approved > Budget
- AWS > RDS > DB Instance > Approved > Custom
- AWS > RDS > DB Instance > Approved > Database Engines
- AWS > RDS > DB Instance > Approved > Encryption at Rest
- AWS > RDS > DB Instance > Approved > Encryption at Rest > Customer Managed Key
- AWS > RDS > DB Instance > Approved > Instance Classes
- AWS > RDS > DB Instance > Approved > Regions
- AWS > RDS > DB Instance > Approved > Usage
- AWS > RDS > DB Instance > Auto Minor Version Upgrade
- AWS > RDS > DB Instance > Backup Retention Period
- AWS > RDS > DB Instance > Backup Retention Period > Days
- AWS > RDS > DB Instance > CMDB
- AWS > RDS > DB Instance > Configured
- AWS > RDS > DB Instance > Configured > Claim Precedence
- AWS > RDS > DB Instance > Configured > Source
- AWS > RDS > DB Instance > Copy Tags to Snapshot
- AWS > RDS > DB Instance > Deletion Protection
- AWS > RDS > DB Instance > Logs Export Configuration
- AWS > RDS > DB Instance > Logs Export Configuration > Log Types
- AWS > RDS > DB Instance > Multi-AZ
- AWS > RDS > DB Instance > Parameter Group
- AWS > RDS > DB Instance > Parameter Group > Name
- AWS > RDS > DB Instance > Performance Insights
- AWS > RDS > DB Instance > Performance Insights > KMS Key
- AWS > RDS > DB Instance > Performance Insights > Retention Period
- AWS > RDS > DB Instance > Publicly Accessible
- AWS > RDS > DB Instance > Regions
- AWS > RDS > DB Instance > Schedule
- AWS > RDS > DB Instance > Schedule Tag
- AWS > RDS > DB Instance > Tags
- AWS > RDS > DB Instance > Tags > Template
- AWS > RDS > DB Instance > Usage
- AWS > RDS > DB Instance > Usage > Limit
- AWS > RDS > DB Parameter Group > Active
- AWS > RDS > DB Parameter Group > Active > Age
- AWS > RDS > DB Parameter Group > Active > Last Modified
- AWS > RDS > DB Parameter Group > Approved
- AWS > RDS > DB Parameter Group > Approved > Custom
- AWS > RDS > DB Parameter Group > Approved > Regions
- AWS > RDS > DB Parameter Group > Approved > Usage
- AWS > RDS > DB Parameter Group > CMDB
- AWS > RDS > DB Parameter Group > Configured
- AWS > RDS > DB Parameter Group > Configured > Claim Precedence
- AWS > RDS > DB Parameter Group > Configured > Source
- AWS > RDS > DB Parameter Group > Regions
- AWS > RDS > DB Parameter Group > Tags
- AWS > RDS > DB Parameter Group > Tags > Template
- AWS > RDS > DB Parameter Group > Usage
- AWS > RDS > DB Parameter Group > Usage > Limit
- AWS > RDS > DB Snapshot [Manual] > Active
- AWS > RDS > DB Snapshot [Manual] > Active > Age
- AWS > RDS > DB Snapshot [Manual] > Active > Budget
- AWS > RDS > DB Snapshot [Manual] > Active > Last Modified
- AWS > RDS > DB Snapshot [Manual] > Approved
- AWS > RDS > DB Snapshot [Manual] > Approved > Budget
- AWS > RDS > DB Snapshot [Manual] > Approved > Custom
- AWS > RDS > DB Snapshot [Manual] > Approved > Encryption at Rest
- AWS > RDS > DB Snapshot [Manual] > Approved > Encryption at Rest > Customer Managed Key
- AWS > RDS > DB Snapshot [Manual] > Approved > Regions
- AWS > RDS > DB Snapshot [Manual] > Approved > Usage
- AWS > RDS > DB Snapshot [Manual] > CMDB
- AWS > RDS > DB Snapshot [Manual] > Configured
- AWS > RDS > DB Snapshot [Manual] > Configured > Claim Precedence
- AWS > RDS > DB Snapshot [Manual] > Configured > Source
- AWS > RDS > DB Snapshot [Manual] > Regions
- AWS > RDS > DB Snapshot [Manual] > Tags
- AWS > RDS > DB Snapshot [Manual] > Tags > Template
- AWS > RDS > DB Snapshot [Manual] > Trusted Access
- AWS > RDS > DB Snapshot [Manual] > Trusted Access > Accounts
- AWS > RDS > DB Snapshot [Manual] > Usage
- AWS > RDS > DB Snapshot [Manual] > Usage > Limit
- AWS > RDS > Enabled
- AWS > RDS > Global Cluster > Active
- AWS > RDS > Global Cluster > Active > Age
- AWS > RDS > Global Cluster > Active > Budget
- AWS > RDS > Global Cluster > Active > Last Modified
- AWS > RDS > Global Cluster > Approved
- AWS > RDS > Global Cluster > Approved > Budget
- AWS > RDS > Global Cluster > Approved > Custom
- AWS > RDS > Global Cluster > Approved > Usage
- AWS > RDS > Global Cluster > CMDB
- AWS > RDS > Option Group > Active
- AWS > RDS > Option Group > Active > Age
- AWS > RDS > Option Group > Active > Last Modified
- AWS > RDS > Option Group > Approved
- AWS > RDS > Option Group > Approved > Custom
- AWS > RDS > Option Group > Approved > Regions
- AWS > RDS > Option Group > Approved > Usage
- AWS > RDS > Option Group > CMDB
- AWS > RDS > Option Group > Configured
- AWS > RDS > Option Group > Configured > Claim Precedence
- AWS > RDS > Option Group > Configured > Source
- AWS > RDS > Option Group > Regions
- AWS > RDS > Option Group > Tags
- AWS > RDS > Option Group > Tags > Template
- AWS > RDS > Option Group > Usage
- AWS > RDS > Option Group > Usage > Limit
- AWS > RDS > Permissions
- AWS > RDS > Permissions > Levels
- AWS > RDS > Permissions > Levels > Modifiers
- AWS > RDS > Permissions > Levels > Subnet Group Administration
- AWS > RDS > Permissions > Lockdown
- AWS > RDS > Permissions > Lockdown > API Boundary
- AWS > RDS > Permissions > Lockdown > Engine Types
- AWS > RDS > Regions
- AWS > RDS > Stack
- AWS > RDS > Stack > Secret Variables
- AWS > RDS > Stack > Source
- AWS > RDS > Stack > Terraform Version
- AWS > RDS > Stack > Variables
- AWS > RDS > Subnet Group > Active
- AWS > RDS > Subnet Group > Active > Age
- AWS > RDS > Subnet Group > Active > Last Modified
- AWS > RDS > Subnet Group > Approved
- AWS > RDS > Subnet Group > Approved > Custom
- AWS > RDS > Subnet Group > Approved > Regions
- AWS > RDS > Subnet Group > Approved > Usage
- AWS > RDS > Subnet Group > CMDB
- AWS > RDS > Subnet Group > Configured
- AWS > RDS > Subnet Group > Configured > Claim Precedence
- AWS > RDS > Subnet Group > Configured > Source
- AWS > RDS > Subnet Group > Management
- AWS > RDS > Subnet Group > Regions
- AWS > RDS > Subnet Group > Tags
- AWS > RDS > Subnet Group > Tags > Template
- AWS > RDS > Subnet Group > Usage
- AWS > RDS > Subnet Group > Usage > Limit
- AWS > RDS > Tags Template [Default]
- AWS > RDS > Trusted Accounts [Default]
- AWS > Turbot > Event Handlers > Events > Rules > Custom Event Patterns > RDS
- AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-rds
- AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-rds
- AWS > Turbot > Permissions > Compiled > Lockdown Statements > @turbot/aws-rds
- AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-rds
Policy Packs
- AWS CIS v3.0.0 - Section 2 - Storage
- Enforce AWS RDS DB Cluster Manual Snapshots Are Shared With Approved Accounts
- Enforce AWS RDS DB Instances Are Not Publicly Accessible
- Enforce AWS RDS DB Instances Use Specific Engines and Instance Classes
- Enforce AWS RDS Manual DB Cluster Snapshots Are Shared With Trusted Accounts
- Enforce AWS RDS Manual DB Instance Snapshots Are Shared With Trusted Accounts
- Enforce Encryption at Rest Is Enabled for RDS DB Instances