Query: rds_db_cluster_aurora_postgres_not_exposed_to_local_file_read_vulnerability

select
  arn as resource,
  case
    when not engine ilike '%aurora-postgres%' then 'skip'
    when engine ilike '%aurora-postgres%'
    and engine_version like any (
      array [ '10.11',
      '10.12',
      '10.13',
      '11.6',
      '11.7',
      '11.8' ]
    ) then 'alarm'
    else 'ok'
  end as status,
  case
    when not engine ilike '%aurora-postgres%' then title || ' not Aurora PostgreSQL edition.'
    when engine ilike '%aurora-postgres%'
    and engine_version like any (
      array [ '10.11',
      '10.12',
      '10.13',
      '11.6',
      '11.7',
      '11.8' ]
    ) then title || ' exposed to local file read vulnerability.'
    else title || ' not exposed to local file read vulnerability.'
  end as reason,
  region,
  account_id
from
  aws_rds_db_instance;