AWS RDS cluster not configured with IAM authentication misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_162
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	f79f0e00-fcf1-49ef-ab0c-b3db225b086d

Impact

This rule identifies RDS clusters that are not configured with IAM authentication. If you enable IAM authentication you don't need to store user credentials in the database, because authentication is managed externally using IAM. IAM database authentication provides the network traffic to and from database clusters is encrypted using Secure Sockets Layer (SSL), Centrally manage access to your database resources and Profile credentials instead of a password, for greater security.

How to Fix

Resource: AWS::RDS::DBCluster

• Arguments: Properties.EnableIAMDatabaseAuthentication [source,go]

---

Resources: Enabled: Type: 'AWS::RDS::DBCluster' Properties: ...

• EnableIAMDatabaseAuthentication: true

---