AWS Amazon RDS instances Enhanced Monitoring is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_118
Category - Subcategory	Monitoring - Performance Monitoring
Provider	AWS
Severity	LOW
Framework	CloudFormation, Terraform, Terraform Plan

Impact

This rule ensures that enhanced monitoring is enabled for Amazon RDS instances. Enhanced monitoring provides detailed metrics in real-time for the operating system that your DB instance runs on, which helps in identifying and diagnosing performance issues. This rule checks whether the MonitoringInterval property is set to a valid value for enabling enhanced monitoring.

How to Fix

To fix this issue, ensure that the MonitoringInterval property in the AWS::RDS::DBInstance resource is set to a valid value (1, 5, 10, 15, 30, or 60 seconds).

Example: [source,go]

Resources: MyRDSInstance: Type: AWS::RDS::DBInstance Properties: DBInstanceIdentifier: example-instance

• MonitoringInterval: 60 ...

---