An RDS event notifications subscription should be configured for critical database security group events

NIST

Description

Confirms that an RDS event subscription is configured for critical database security group events.

Configure an RDS event subscription for 'db-security-group' source type with 'authorization failure' event.

Log in to the AWS Management Console and open the Amazon RDS console.
Go to 'Event subscriptions'.
Create or modify an event subscription.
Set source type to 'DB security group' and include 'authorization failure' events.
Save the subscription.

NIST