Ensure Rule: RDS database Security Group Restriction

Description

Troubleshooting

Remediation Steps

Step 1: Identify the RDS Database

2. 1.
   Log in to the AWS Management Console.
4. 2.
   Navigate to the Amazon RDS service.

Step 2: Check Security Groups

2. 1.
   Select the appropriate region from the top-right corner.
4. 2.
   In the left sidebar, click on "Databases".
6. 3.
   Select the target RDS database from the list.

Step 3: Review Security Groups

2. 1.
   In the "Connectivity & security" tab of the RDS database details page, locate the "VPC Security Groups" section.
4. 2.
   Review the security groups listed.

Step 4: Remove Unrestricted Security Group

2. 1.
   If an unrestricted security group is found, note down the security group name.
4. 2.
   Navigate to the Amazon EC2 service in the same region.

Step 5: Update Security Group rules

2. 1.
   In the left sidebar, click on "Security Groups".
4. 2.
   Search for the security group name noted earlier.
6. 3.
   Select the security group in question.

If Inbound rule needs modification:

2. 1.
   In the "Inbound Rules" tab, review the inbound rules.
4. 2.
   Identify the rule(s) that allow unrestricted access (0.0.0.0/0) and note them down.
6. 3.
   Click on "Edit inbound rules".
8. 4.
   Remove the unrestricted rules.
10. 5.
    Add specific rules for the required inbound access.
12. 6.
    Click "Save rules" to apply the changes.

If Outbound rule needs modification:

2. 1.
   In the "Outbound Rules" tab, review the outbound rules.
4. 2.
   Identify the rule(s) that allow unrestricted access (0.0.0.0/0) and note them down.
6. 3.
   Click on "Edit outbound rules".
8. 4.
   Remove the unrestricted rules.
10. 5.
    Add specific rules for the required outbound access.
12. 6.
    Click "Save rules" to apply the changes.

Code