Critical
RDS
Regional
RDS DB Instances should prohibit public access
CIS v3.0.0NIST 800-53PCI DSS v3.2.1PCI DSS v4.0.1ISO 27001
Description
Checks whether the RDS DB Instances prohibit public access.
Remediation
To ensure that the identified RDS DB instance prohibits public access, follow these steps:
Steps
- Log in to the AWS Management Console and navigate to the Amazon RDS console.
- In the navigation pane, click on 'Databases'.
- Select the RDS DB instance that needs to be modified to prohibit public access.
- Choose 'Modify'.
- In the 'Modify DB Instance' page, locate the 'Public accessibility' section.
- Set the 'Public accessibility' option to 'No' to ensure the DB instance is not publicly accessible.
- Scroll to the bottom of the page and click on 'Continue'.
- Review your changes. You can apply them immediately or during the next maintenance window.
- Click 'Modify DB Instance' to save the changes.
Compliance
CIS v3.0.0NIST 800-53PCI DSS v3.2.1PCI DSS v4.0.1ISO 27001