Medium
RDS
Regional
RDS for PostgreSQL DB instances should be encrypted in transit
FSBP
Description
Ensures RDS for PostgreSQL instances enforce SSL connections via the rds.force_ssl parameter.
Remediation
Enable encryption in transit for PostgreSQL DB instances via the parameter group.
Steps
- Sign in to the AWS Management Console and open the Amazon RDS console.
- Select the PostgreSQL DB instance and choose 'Modify'.
- Locate the 'DB parameter group' setting and set 'rds.force_ssl' to '1'.
- Apply and save.
Compliance
FSBP