Skip to content

AWS RDS security groups are not defined

Description

By ensuring that AWS RDS security groups are defined, you can help protect your instances from unauthorized access and ensure that only authorized traffic is allowed to reach your instances. This can help prevent data breaches and other security incidents, and can also help ensure that your instances are not overwhelmed by unwanted traffic.

Code Example

go
resource "aws_db_security_group" "exists" {
  name = "rds_sg"

  ingress {
    cidr = "10.0.0.0/24"
  }
}

Remediation

Terraform

Rule Details

FieldValue
IDIAC-0246
SeverityLOW
IaC TypeTerraform
FrameworksTerraform
Checkov IDCKV_AWS_198

References