All checks
Medium
RDS DB proxies should require TLS encryption for connections
Flags RDS DB proxies that do not require TLS, so a client can connect to the proxy unencrypted. The setting covers only the client-to-proxy leg: whether the proxy's own connection to the database is encrypted is settled on the database, and a pass here says nothing about it.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Proxies → the proxy → Modify
With the AWS CLI
aws rds modify-db-proxy --db-proxy-name <db-proxy-name> --require-tls --region <region>With Terraform
resource "aws_db_proxy" "this" {
name = var.db_proxy_name
engine_family = var.engine_family
role_arn = var.role_arn
vpc_subnet_ids = var.vpc_subnet_ids
require_tls = true
}See which of your accounts this check is failing on.
Book a demo