Query: RDS DB instances should not use public subnet

Description

This control checks if RDS DB instance is configured with public subnet as there is a risk of exposing sensitive data.

Query

Tables used in this query:

• aws_rds_db_instance
• aws_rds_db_subnet_group
• aws_vpc_route_table
• aws_vpc_subnet

Controls using this query:

• RDS DB instances should not use public subnet

SQL