RDS event subscriptions should be configured to notify for critical events

Documentos > Datadog Security > OOTB Rules > RDS event subscriptions should be configured to notify for critical events

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This control ensures RDS event subscriptions for both database clusters and instances. Database clusters should have notifications enabled for maintenance and failure events, and database instances should have notifications enabled for maintenance, configuration change and failure events. The control skips if no RDS DB event subscriptions exist in your account. The control fails if an event subscription exists but does not include the required categories.

RDS event notifications leverage Amazon SNS to alert you about changes in the availability or configuration of your RDS resources, enabling quick response. For further details on RDS event notifications, refer to the Using Amazon RDS event notification section in the Amazon RDS User Guide.

Remediation

To subscribe to RDS event notifications, refer to the Subscribing to Amazon RDS event notification section in the Amazon RDS User Guide.