RDS cluster exports snapshots to publicly accessible S3 bucket

문서 > Datadog 보안 > OOTB Rules > RDS cluster exports snapshots to publicly accessible S3 bucket

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

A private RDS cluster is exporting database snapshots to a publicly accessible S3 bucket. This configuration can expose sensitive data to unauthorized users.

Remediation

Update the S3 bucket configuration to disable public access. See the official documentation for more information on how to disable public access.
Restrict access to the S3 bucket containing the snapshots to only the necessary users or roles by reviewing IAM policies and bucket resource policies. For more information on restricting access to an S3 bucket, see the official documentation.