Medium
RedshiftServerless
Regional
Redshift Serverless namespaces should not use the default admin username
Description
Flags Amazon Redshift Serverless namespaces whose admin username matches the AWS default. The default is well known and removing it reduces the value of brute-force attacks on the admin account.
Remediation
Recreate or modify each Redshift Serverless namespace to use a non-default admin username.
Steps
- Open the Amazon Redshift Serverless console and choose Namespaces.
- Identify any namespace with adminUsername set to 'admin'.
- Change the admin username to a non-default value (e.g. via the AWS CLI 'update-namespace' command).
- Update any applications that connect with the previous admin credentials.