DMS endpoints should require SSL/TLS

문서 > Datadog 보안 > OOTB Rules > DMS endpoints should require SSL/TLS

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

This control verifies if an AWS DMS endpoint is configured to use an SSL connection. The ssl_mode of the endpoint must set to either require, verify-ca or verify-full.

SSL/TLS connections enhance security by encrypting data exchanged between DMS replication instances and your database. Additionally, using certificates adds another layer of protection by ensuring the connection is established with the intended database through server certificate validation. The server certificate is automatically installed on all provisioned database instances. Enabling SSL on your DMS endpoints ensures data confidentiality during migration.

Remediation

For guidance on configuring SSL for DMS endpoints, please refer to the Using SSL with AWS Database Migration Service section of the AWS Database Migration Service User Guide.