DMS Replication Auto Minor Version Upgrade Should Be Enabled

More Info:

Checks if an AWS Database Migration Service (AWS DMS) replication instance has automatic minor version upgrades enabled. The rule is NON_COMPLIANT if an AWS DMS replication instance is not configured with automatic minor version upgrades.

Risk Level

Low

Address

Configuration

Compliance Standards

CBP,SEBI

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using AWS CLI, you can follow these steps:

Check the current setting: Run the following AWS CLI command to check the current setting for DMS Replication Auto Minor Version Upgrade:
```
aws dms describe-replication-instances --filters Name=replication-instance-id,Values=<REPLICATION_INSTANCE_ID>
```
Enable Auto Minor Version Upgrade: If the Auto Minor Version Upgrade is not enabled, you can enable it using the following AWS CLI command:
```
aws dms modify-replication-instance --replication-instance-arn <REPLICATION_INSTANCE_ARN> --apply-immediately --replication-instance-identifier <REPLICATION_INSTANCE_IDENTIFIER> --auto-minor-version-upgrade
```
Make sure to replace <REPLICATION_INSTANCE_ARN> and <REPLICATION_INSTANCE_IDENTIFIER> with the actual ARN and identifier of your replication instance.
Verify the Change: Run the describe-replication-instances command again to verify that the Auto Minor Version Upgrade is now enabled:
```
aws dms describe-replication-instances --filters Name=replication-instance-id,Values=<REPLICATION_INSTANCE_ID>
```
Monitor the Replication Instance: Keep an eye on the replication instance after enabling Auto Minor Version Upgrade to ensure that it is functioning as expected without any issues.

By following these steps, you should be able to remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using AWS CLI.

Using Python

To remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using Python, you can use the AWS SDK for Python (Boto3) to update the DB cluster parameter group associated with your RDS instance. Follow these steps to enable the DMS Replication Auto Minor Version Upgrade:

Install Boto3: If you haven’t already installed the Boto3 library, you can do so using pip:
```
pip install boto3
```

Write a Python script to update the DB cluster parameter group:

import boto3

# Define the AWS region and the name of the RDS DB cluster
region = 'your_aws_region'
db_cluster_identifier = 'your_db_cluster_identifier'

# Create a RDS client
rds_client = boto3.client('rds', region_name=region)

# Get the current DB cluster parameter group for the RDS instance
response = rds_client.describe_db_clusters(
    DBClusterIdentifier=db_cluster_identifier
)
db_cluster_parameter_group = response['DBClusters'][0]['DBClusterParameterGroup']

# Modify the parameter group to enable DMS Replication Auto Minor Version Upgrade
response = rds_client.modify_db_cluster_parameter_group(
    DBClusterParameterGroupName=db_cluster_parameter_group,
    Parameters=[
        {
            'ParameterName': 'dms_auto_minor_version_upgrade',
            'ParameterValue': 'enabled',
            'ApplyMethod': 'immediate'
        },
    ]
)

print("DMS Replication Auto Minor Version Upgrade has been enabled for the RDS instance.")

Replace 'your_aws_region' and 'your_db_cluster_identifier' with your AWS region and RDS DB cluster identifier in the script.
Run the Python script to enable the DMS Replication Auto Minor Version Upgrade for your AWS RDS instance.

By following these steps, you can remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using Python and the Boto3 library.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

DMS Replication Auto Minor Version Upgrade Should Be Enabled

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation