AWS RDS Terraform module

Upstream version 7.2.2
9 controls from NYDFS Cybersecurity Regulation requirements

Terraform Module Source

nydfs23.compliance.tf/terraform-aws-modules/rds/aws
ComplianceInputsOutputsResourcesRulesDiff (0)README
CloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365500.14(a)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled500.15(a)
Framework requirement
RDS DB instances and clusters should have enhanced monitoring enabled
rds_db_instance_and_cluster_enhanced_monitoring_enabled500.02(b)(3)
Framework requirement
RDS DB instance backup should be enabled
rds_db_instance_backup_enabled500.02(b)(5)
Framework requirement
RDS DB instances should have deletion protection enabled
rds_db_instance_deletion_protection_enabled500.02(a)
Framework requirement
RDS DB instance encryption at rest should be enabled
rds_db_instance_encryption_at_rest_enabled500.15(a)
Framework requirement
RDS DB instances should have logging enabled
rds_db_instance_logging_enabled500.14(a)
Framework requirement
RDS DB instances should have multiple AZ enabled
rds_db_instance_multiple_az_enabled500.02(a)
Framework requirement
RDS DB instances should prohibit public access
rds_db_instance_prohibit_public_access500.07
Framework requirement