Query: GuardDuty RDS protection should be enabled

Description

This control checks whether GuardDuty RDS protection is enabled. For a standalone account, the control fails if GuardDuty RDS protection is disabled in the account. In a multi-account environment, the control fails if the delegated GuardDuty administrator account and all member accounts don't have RDS protection enabled.

Query

Tables used in this query:

• aws_guardduty_detector

Controls using this query:

• 9 GuardDuty RDS Protection should be enabled
• GuardDuty RDS protection should be enabled

SQL