Neptune DB cluster snapshots should not be public

Documentos > Datadog Security > OOTB Rules > Neptune DB cluster snapshots should not be public

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This control ensures that a Neptune manual DB cluster snapshot is not publicly accessible.

A Neptune DB cluster manual snapshot should remain private unless intentionally made public. When an unencrypted manual snapshot is shared publicly, it becomes accessible to all AWS accounts, which could lead to unintentional data exposure.

Remediation

For guidance on sharing snapshots securely, please refer to the Sharing a DB cluster snapshot section of the Neptune User Guide.