AWS RDS Terraform module

Upstream version 7.2.2
9 controls from PCI DSS v4.0 requirements

Terraform Module Source

pcidss.compliance.tf/terraform-aws-modules/rds/aws
CloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_3653.2.1
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled3.5.1
Framework requirement
RDS DB instance automatic minor version upgrade should be enabled
rds_db_instance_automatic_minor_version_upgrade_enabled6.3.3
Framework requirement
RDS DB instance backup should be enabled
rds_db_instance_backup_enabled10.3.3
Framework requirement
RDS DB instances backup retention period should be greater than or equal to 7
rds_db_instance_backup_retention_period_less_than_710.3.3
Framework requirement
RDS DB instances should be integrated with CloudWatch logs
rds_db_instance_cloudwatch_logs_enabled5.3.4
Framework requirement
RDS DB instance encryption at rest should be enabled
rds_db_instance_encryption_at_rest_enabled3.5.1
Framework requirement
RDS DB instances should have iam authentication enabled
rds_db_instance_iam_authentication_enabled7.2.1
Framework requirement
RDS DB instances should not use public subnet
rds_db_instance_no_public_subnet1.2.8
Framework requirement