Skip to content

AWS Amazon RDS instances Enhanced Monitoring is disabled

Description

This policy ensures that enhanced monitoring is enabled for Amazon RDS instances. Enhanced monitoring provides detailed metrics in real-time for the operating system that your DB instance runs on, which helps in identifying and diagnosing performance issues. This policy checks whether the `MonitoringInterval` property is set to a valid value for enabling enhanced monitoring.

Code Example

go
resource "aws_db_instance" "default" {
  allocated_storage    = 10
  ...
+ monitoring_interval  = 5
  }

Remediation

Terraform

  • Resource: aws_db_instance
  • Arguments: monitoring_interval

Rule Details

FieldValue
IDIAC-0171
SeverityLOW
IaC TypeCloudformation
FrameworksTerraform, TerraformPlan, CloudFormation
Checkov IDCKV_AWS_118

References