turbot/aws_compliance
Loading controls...

Control: 24 RDS database clusters should use a custom administrator username

Description

This control checks whether an Amazon RDS database cluster has changed the admin username from its default value. This rule will fail if the admin username is set to the default value.

When creating an Amazon RDS database, you should change the default admin username to a unique value. Default usernames are public knowledge and should be changed during RDS database creation. Changing the default usernames reduces the risk of unintended access.

Remediation

For changing the admin username associated with the Amazon RDS database cluster, create a new RDS database cluster and change the default admin username while creating the database.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_rds_24

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_rds_24 --share

SQL

This control uses a named query:

rds_db_cluster_no_default_admin_name

Tags