DMS Automatic Minor Version Upgrades Enabled.
More Info:
This rule checks if an AWS Database Migration Service (AWS DMS) replication instance has automatic minor version upgrades enabled. The rule is NON_COMPLIANT if an AWS DMS replication instance is not configured with automatic minor version upgrades.Risk Level
LowAddress
ConfigurationCompliance Standards
CBP,SEBITriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of enabling DMS automatic minor version upgrades for AWS RDS using the AWS Management Console, follow these step-by-step instructions:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/console/) and log in using your credentials.
- Navigate to RDS Service: Once you are logged in, navigate to the RDS service by typing “RDS” in the search bar and selecting the RDS service from the dropdown.
- Select the RDS Instance: In the RDS dashboard, select the RDS instance for which you want to disable DMS automatic minor version upgrades by clicking on its name.
- Modify the RDS Instance: In the RDS instance details page, click on the “Modify” button located at the top of the page.
- Modify DMS Automatic Minor Version Upgrades Setting: Scroll down to the “Backup” section of the modify instance page. Look for the “Enable automatic minor version upgrades” option and uncheck the checkbox next to it to disable automatic minor version upgrades for DMS.
- Review and Apply Changes: Review the other settings to ensure they are correct. Once you have unchecked the “Enable automatic minor version upgrades” option, scroll down and click on the “Continue” button.
- Apply Changes: Review the summary of changes and click on the “Modify DB Instance” button to apply the changes.
- Monitor the Modification: AWS will start applying the changes to the RDS instance. You can monitor the progress of the modification in the RDS console. Once the modification is complete, the DMS automatic minor version upgrades will be disabled for the RDS instance.
Using CLI
Using CLI
To remediate the misconfiguration of having DMS Automatic Minor Version Upgrades enabled for an AWS RDS instance using AWS CLI, you can follow these steps:
-
Disable DMS Automatic Minor Version Upgrades: You can disable DMS Automatic Minor Version Upgrades for an RDS instance by modifying the DB instance with the AWS CLI. Here’s the command to disable it:
Replace
your-db-instance-namewith the actual identifier of your RDS instance. -
Verify the Change: You can verify that the modification was successful by describing the RDS instance and checking the
AutoMinorVersionUpgradeparameter. Here’s the command to describe the RDS instance:Ensure that theAutoMinorVersionUpgradeparameter is set tofalseafter the modification. - Monitor the RDS Instance: After making the change, monitor the RDS instance for any impact or issues resulting from the modification. Ensure that the instance is running smoothly without any disruptions.
Using Python
Using Python
To remediate the misconfiguration of enabling DMS Automatic Minor Version Upgrades for AWS RDS using Python, you can follow these steps:
- Install the Boto3 library: Boto3 is the AWS SDK for Python, which allows Python developers to write software that makes use of services like Amazon S3 and Amazon EC2. You can install it using pip:
- Write a Python script to update the DMS Automatic Minor Version Upgrades setting for your RDS instance. Here is an example script that uses Boto3 to disable the automatic minor version upgrades:
- Run the Python script: Save the above script in a file, e.g.,
remediate_dms_auto_minor_upgrade.py, and run it using Python:
- Verify the remediation: After running the script, check the AWS Management Console or use the AWS CLI to verify that the DMS Automatic Minor Version Upgrades setting has been successfully disabled for the specified RDS instance.