Critical
DMS
Regional
Database Migration Service replication instances should not be public
PCI DSSNISTISO 27001
Description
Flags DMS replication instances that are publicly accessible. Replication instances should have private IP addresses and not be reachable outside the replication network.
Remediation
To ensure DMS replication instances are not public, avoid selecting the 'Publicly accessible' option when creating or modifying instances. If an instance is public, delete it and recreate it with the correct settings.
Steps
- Open the AWS DMS console.
- Select the replication instance.
- Verify or modify the 'Publicly accessible' setting to false.
- If necessary, delete and recreate the instance with the correct setting.
Compliance
PCI DSSNISTISO 27001