RDS event subscriptions should be configured to notify for critical database security group events

Documentos > Datadog Security > OOTB Rules > RDS event subscriptions should be configured to notify for critical database security group events

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This control ensures existing Amazon RDS event subscriptions for database parameter groups have notifications enabled for configuration change and failure events. The control skips if no RDS DB event subscriptions exist in your account. The control fails if an event subscription exists but does not include the required categories.

RDS event notifications leverage Amazon SNS to alert you about changes in the availability or configuration of your RDS resources, enabling quick response. For further details on RDS event notifications, refer to the Using Amazon RDS event notification section in the Amazon RDS User Guide.

Remediation

To subscribe to RDS event notifications, refer to the Subscribing to Amazon RDS event notification section in the Amazon RDS User Guide.