Critical
DocumentDB
Regional
Amazon DocumentDB manual cluster snapshots should not be public
NIST 800-53PCI DSS v4.0.1PCI DSS v1.4.4ISO 27001
Description
Flags DocumentDB manual cluster snapshots that are publicly accessible, which exposes data to all AWS accounts.
Remediation
Make your Amazon DocumentDB manual cluster snapshots private by removing public access permissions.
Steps
- Open the Amazon DocumentDB console.
- Choose 'Snapshots' from the navigation pane.
- Select the manual snapshot you want to modify.
- Choose 'Actions' and then 'Manage access'.
- Remove 'all' from the 'Public access' section.
- Choose 'Save changes'.
Compliance
NIST 800-53PCI DSS v4.0.1PCI DSS v1.4.4ISO 27001