Low
RDS
Regional
Existing RDS event notification subscriptions should be configured for critical database instance events
NIST
Description
This check verifies whether an Amazon RDS event subscription for database instances has notifications enabled for 'maintenance', 'configuration change', and 'failure' event categories.
Remediation
If the check fails, the event subscription for the RDS database instance is not configured for the critical event categories 'maintenance', 'configuration change', and 'failure'. Follow the steps below to fix this.
Steps
- Navigate to the Amazon RDS console.
- Go to 'Event Subscriptions' and review the event subscriptions for database clusters.
- Open the failing subscription.
- Ensure that both 'maintenance' and 'failure' event categories or All event categories are selected for database instances.
- Update the existing subscription to include the missing event categories.
Compliance
NIST