Skip to content

Alibaba Cloud RDS instance is not set to perform auto upgrades for minor versions

Description

Auto upgrades for minor versions help ensure that your RDS instance is running the latest version, which can include security updates and patches. By enabling auto upgrades, you can help protect your RDS instance and the data it contains from vulnerabilities and threats.

Code Example

go
resource "alicloud_db_instance" "example" {
  ...
+  auto_upgrade_minor_version  = "Auto"
}

Remediation

  • Resource: alicloud_db_instance
  • Arguments: auto_upgrade_minor_version

To mitigate this issue, ensure the `auto_upgrade_minor_version` attribute is set to `Auto` in the `alicloud_db_instance` resource.

Example:

Rule Details

FieldValue
IDIAC-0030
SeverityLOW
IaC TypeTerraform
FrameworksTerraform
Checkov IDCKV_ALI_30

References