Medium RDS Regional

RDS Database Clusters should use a custom administrator username

NIST

Description

Flags RDS database clusters using default admin usernames such as admin, root, sa, oracle, or postgres.


Remediation

Create a snapshot and restore as a new cluster with a custom admin username.

Steps

  1. Take a snapshot of the existing RDS database cluster.
  2. Restore the snapshot as a new cluster with a custom admin username.
  3. Migrate data and update applications.
  4. Delete the old cluster.

Compliance

NIST