Low
RDS
Regional
RDS instances should not use a database engine default port
NIST
Description
Checks if RDS instances are using custom ports instead of the default ports for their respective database engines. This check also fetches the tags associated with each RDS instance.
Remediation
To change the port of an RDS instance to a non-default value, follow these steps:
Steps
- Log in to the AWS Management Console and open the Amazon RDS console.
- In the navigation pane, select 'Databases'.
- Choose the RDS instance you want to modify.
- In the 'Connectivity & security' section, find the 'Port' setting.
- Click on 'Modify'.
- In the 'DB Port Number' field, enter a custom port number that is not the default for the database engine.
- Scroll down and click on 'Continue'.
- Review the changes and click on 'Modify DB Instance' to apply the new port setting.
- Update any applications or services that connect to this database to use the new port number.
Compliance
NIST