RDS Instances Should Use Latest Generation of Instance Classes
More Info:
All RDS databases instances provisioned within your AWS account should be using the latest generation of instance classes in order to get the best performance with lower costs.Risk Level
MediumAddress
Reliability, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of RDS instances not using the latest generation of instance classes in AWS, you can follow these steps using the AWS Management Console:
- Log in to the AWS Management Console: Go to https://aws.amazon.com/ and log in to your AWS account using your credentials.
- Navigate to RDS Service: Click on the “Services” dropdown menu at the top of the page and select “RDS” under the Database category.
- Select the RDS Instance: In the RDS dashboard, select the RDS instance that you want to update to the latest generation of instance classes.
- Modify the Instance: Click on the instance ID of the RDS instance to go to its details page. Then, click on the “Modify” button at the top of the page.
- Choose Instance Class: In the Modify RDS Instance page, scroll down to the “DB Instance Class” section. Click on the dropdown menu and select the latest generation of instance class that you want to use for your RDS instance.
- Apply Changes: Review the other configuration settings if needed, and then scroll down to the bottom of the page and click on the “Continue” button.
- Apply Immediately or Schedule: Choose whether you want to apply the changes immediately or schedule the modification for a later time. Select the appropriate option and click on the “Modify DB Instance” button.
- Monitor the Modification: The modification process will start, and you can monitor the progress on the RDS dashboard. Once the modification is complete, the RDS instance will be using the latest generation of instance classes.
Using CLI
Using CLI
To remediate the misconfiguration of RDS instances not using the latest generation of instance classes in AWS, you can follow these steps using the AWS CLI:
- List all the existing RDS instances to identify the instances that are not using the latest generation of instance classes:
-
Identify the instances that are not using the latest generation of instance classes based on the
DBInstanceClassattribute. -
Modify the RDS instance to use the latest generation of instance classes. You can do this by modifying the instance with the
modify-db-instancecommand. Replaceyour-db-instance-identifierwith the identifier of the RDS instance you want to modify anddb.t3.mediumwith the desired latest generation instance class:
- Monitor the modification progress by describing the RDS instance and checking the
DBInstanceClassattribute:
- Verify that the RDS instance is now using the latest generation of instance class.
Using Python
Using Python
To remediate the misconfiguration of RDS instances not using the latest generation of instance classes in AWS, you can use the AWS SDK for Python (Boto3) to update the instance classes. Below are the step-by-step instructions on how to remediate this issue using Python:
-
Install Boto3:
If you haven’t installed Boto3, you can do so using pip:
- Configure AWS Credentials: Make sure you have configured your AWS credentials with the necessary permissions to modify RDS instances. You can set up your credentials using AWS CLI or by setting environment variables.
-
Write Python script to update RDS instance classes:
Use the following Python script to update the RDS instances to use the latest generation of instance classes:
Make sure to replace
'db.m5.large'with the latest generation instance class that you want to update the RDS instances to. -
Run the Python script:
Save the script in a file (e.g.,
update_rds_instance_classes.py) and run it using Python: - Verify the changes: After running the script, check the AWS Management Console or use Boto3 to confirm that the RDS instances have been updated to use the latest generation of instance classes.