AWS RDS Aurora Terraform module
Upstream version 10.4.1
9 controls from PCI DSS v4.0 requirements
Terraform Module Source
pcidss.compliance.tf/terraform-aws-modules/rds-aurora/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_3653.2.1
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled3.5.1
Framework requirement
Aurora MySQL DB clusters should have audit logging enabled
rds_db_cluster_aurora_mysql_audit_logging_enabled10.6.3
Framework requirement
Aurora PostgreSQL DB clusters should publish logs to CloudWatch Logs
rds_db_cluster_aurora_postgres_logging_enabled5.3.4
Framework requirement
RDS DB clusters should have automatic minor version upgrade enabled
rds_db_cluster_automatic_minor_version_upgrade_enabled6.3.3
Framework requirement
RDS DB clusters should be encrypted with CMK
rds_db_cluster_encrypted_with_cmk3.5.1
Framework requirement
RDS DB clusters should be encrypted at rest
rds_db_cluster_encryption_at_rest_enabled3.5.1
Framework requirement
RDS DB clusters should have IAM authentication configured
rds_db_cluster_iam_authentication_enabled7.2.1
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement