Medium RDS Regional

RDS database instances should use a custom administrator username

NIST

Description

Flags RDS database instances using default admin usernames such as admin, root, sa, oracle, or postgres.


Remediation

Create a snapshot and restore as a new instance with a custom admin username.

Steps

  1. Take a snapshot of the existing RDS database instance.
  2. Restore the snapshot as a new instance with a custom admin username.
  3. Migrate data and update applications.
  4. Delete the old instance.

Compliance

NIST