09 - RDS IAM Authentication

Ensure your RDS instances have IAM authentication enabled where possible

Ensure that your RDS database instances that support IAM authentication have this enabled. Having this enabled allows for killing access to your databases in one location vs having to manually make this change on each database. For this reason it is considered a security best practice and should always be done. Ensuring this is enabled will help with NIST compliance.

Audit & Remediation

Login into your AWS account
Navigate to the RDS service at: https://console.aws.amazon.com/rds
On the left hand panel select Databases.

Select the DB Identifier hyperlink for the database instance you would like to check.
Under Configuration check if the IAM db authentication under Availability is set to Not Enabled.

At top right corner of this page select the Modify button.
Under Database authentication select Password and IAM database authentication.

Repeat the outlined steps for each RDS instances that you have that support this feature.

See all of your AWS RDS Instances in a single place!

Do you want to see all of your RDS Instances in once place for all regions and all accounts?
Login to our online demo to see exactly what this looks like.
demo.intelligentdiscovery.io

Other Key Features

Inventory

Consolidate your inventory management with consistent and frequent security logs, inventories, and change logs. Dashboard reporting for extensive analytical value.

learn more +

Cost & Usage

Access consolidated capacity, cost, and volume tools in a scaling environment without impacting production or breaking the bank.