Accessibility Should Be Well-defined in Aurora Clusters
More Info:
All the database instances within your Amazon Aurora clusters should have the same accessibility (either public or private) in order to follow AWS best practices.Risk Level
MediumAddress
Reliability, SecurityCompliance Standards
HITRUST, SOC2, NISTCSF, PCIDSS, FedRAMPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the accessibility misconfiguration in an Aurora cluster in AWS RDS using the AWS console, follow these steps:
-
Navigate to the AWS RDS Console:
- Go to the AWS Management Console (https://console.aws.amazon.com/).
- Open the RDS console by selecting “RDS” under the “Database” section.
-
Select the Aurora Cluster:
- In the RDS dashboard, select the Aurora cluster that you want to remediate the accessibility settings for.
-
Modify the Cluster:
- Click on the “Modify” button in the top right corner of the cluster details page.
-
Update the Accessibility Settings:
- Scroll down to the “Network & Security” section of the modify cluster page.
- Here, you can update the following settings:
- VPC Security Group: Ensure that the appropriate VPC security group is selected to control inbound and outbound traffic to the cluster.
- Public Accessibility: If the cluster needs to be publicly accessible, set the “Publicly Accessible” option to “Yes”. Otherwise, set it to “No” for private accessibility.
- VPC: Verify that the cluster is deployed in the correct VPC.
-
Apply the Changes:
- After updating the accessibility settings, scroll to the bottom of the page and click on the “Continue” button.
-
Review and Apply the Changes:
- Review the modifications you have made to the cluster’s accessibility settings.
- Once you are satisfied with the changes, click on the “Modify Cluster” button to apply the new settings.
-
Monitor the Modification Progress:
- The modification process may take some time to complete. You can monitor the progress in the RDS console.
-
Verify the Accessibility Settings:
- Once the modification is complete, verify that the accessibility settings for the Aurora cluster have been updated as intended.
Using CLI
Using CLI
To remediate the accessibility misconfiguration in an Aurora cluster in AWS RDS using AWS CLI, follow these steps:
-
Identify the Misconfigured Aurora Cluster:
- Use the AWS CLI command to list all the Aurora clusters in your AWS account:
- Identify the Aurora cluster that has accessibility misconfiguration.
- Use the AWS CLI command to list all the Aurora clusters in your AWS account:
-
Update the Cluster’s VPC Security Group:
- Use the AWS CLI command to modify the Aurora cluster to specify the correct VPC security group that allows the desired accessibility:
Replace
<cluster-identifier>with the identifier of the Aurora cluster and<security-group-ids>with the IDs of the VPC security groups that should have access to the cluster.
- Use the AWS CLI command to modify the Aurora cluster to specify the correct VPC security group that allows the desired accessibility:
-
Verify the Accessibility Changes:
- Use the AWS CLI command to describe the Aurora cluster and verify that the VPC security group has been updated successfully:
Ensure that the correct VPC security group is now associated with the Aurora cluster.
- Use the AWS CLI command to describe the Aurora cluster and verify that the VPC security group has been updated successfully:
-
Test the Accessibility:
- Verify that the accessibility to the Aurora cluster is now as desired by connecting to the cluster using a client application or tool.
Using Python
Using Python
To remediate the misconfiguration of undefined accessibility in Aurora clusters in AWS RDS using Python, follow these steps:Step 1: Import the necessary Python librariesStep 2: Define the AWS region and create an RDS clientStep 3: List all the Aurora clusters in the AWS accountStep 4: For each Aurora cluster, check if the Step 5: Replace
VpcSecurityGroups parameter is defined'your_aws_region' with your AWS region and 'your_security_group_id' with the desired security group ID that allows access to the Aurora cluster.Step 6: Run the Python script to remediate the misconfiguration of undefined accessibility in Aurora clusters in AWS RDS.By following these steps, you can remediate the misconfiguration of undefined accessibility in Aurora clusters in AWS RDS using Python.