RDS database does not have IAM authentication enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_161
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

IAM authentication uses AWS Identity and Access Management (IAM) to authenticate users and applications that connect to your RDS database. This can be more secure than traditional password-based authentication, as it allows you to use IAM policies and multi-factor authentication to control access to your database.

How to Fix

Resource: "AWS::RDS::DBInstance

• Arguments: Properties.EnableIAMDatabaseAuthentication [source,go]

---

Resources: DB: Type: 'AWS::RDS::DBInstance' Properties: Engine: 'mysql' # or 'postgres' ...

• EnableIAMDatabaseAuthentication: true

---