RDS for PostgreSQL DB clusters should be configured to copy tags to DB snapshots
Checks that RDS for PostgreSQL DB clusters copy their tags to DB snapshots when the snapshots are created, so each snapshot inherits the tags that drive cost allocation, ownership and tag-based access policies. Snapshots taken before the change keep the tags they already have.
- service
- RDS
- severity
- Low
- scope
- evaluated in every region
How to fix it
In the console
RDS → Databases → the DB cluster → Modify
With the AWS CLI
aws rds modify-db-cluster --db-cluster-identifier <db-cluster-id> --copy-tags-to-snapshot --region <region>With Terraform
resource "aws_rds_cluster" "this" {
engine = "postgres"
copy_tags_to_snapshot = true
}
See which of your accounts this check is failing on.
Book a demo