10 - RDS Public Snapshots

Ensure your RDS instances are encrypted at rest

Ensure that your RDS database snapshots are not exposed to all AWS accounts. This is considered security best practice and should always be private. Ensuring this is enabled will help with NIST, HIPPA, GDPR and PCI-DSS compliance.

Audit & Remediation

Login into your AWS account
Navigate to the RDS service at: https://console.aws.amazon.com/rds
On the left hand panel select Snapshots.

Select the Snapshot name hyperlink for the snapshot to check.
In the top right corner select the Actions menu and then select Share snapshot.

Under Preferences ensure that DB snapshot visibility is set to Private.
!Important if you do need to share your snapshot with another account ensure you have specified the correct account(s).

Select Save.
Repeat the outlined steps for each snapshot.

See all of your AWS RDS Instances in a single place!

Do you want to see all of your RDS Instances in once place for all regions and all accounts?
Login to our online demo to see exactly what this looks like.
demo.intelligentdiscovery.io

Other Key Features

Inventory

Consolidate your inventory management with consistent and frequent security logs, inventories, and change logs. Dashboard reporting for extensive analytical value.

learn more +

Cost & Usage

Access consolidated capacity, cost, and volume tools in a scaling environment without impacting production or breaking the bank.