Back to All Checks
Low RDS Regional

RDS DB security groups should be tagged

Description

Flags legacy EC2-Classic RDS DB security groups that have no user-defined tags. EC2-Classic was retired in 2022; this control only emits findings in accounts/regions that still host legacy DB security groups.

Remediation

Apply at least one user-defined tag to every legacy RDS DB security group, or migrate the protected instances to VPC security groups.

Steps

  1. Use the AWS CLI 'rds add-tags-to-resource' command with the security group ARN.
  2. Plan migration to VPC-based RDS security groups (EC2-Classic is retired).
Start Your Free Security Check