Medium RDS Regional

RDS for MySQL DB instances should be encrypted in transit

FSBP

Description

Confirms that RDS for MySQL instances require SSL connections via the require_ssl parameter.


Remediation

Enable encryption in transit for MySQL DB instances via the parameter group.

Steps

  1. Sign in to the AWS Management Console and open the Amazon RDS console.
  2. Select the MySQL DB instance and choose 'Modify'.
  3. Locate the 'DB parameter group' setting and set 'require_ssl' to '1'.
  4. Apply and save.

Compliance

FSBP