More Info:
It is recommended that RDS database instances use instance types from a limited set based on the database workload deployed.Risk Level
MediumAddress
Operational Maturity, Reliability, SecurityCompliance Standards
CBPTriage and Remediation
- Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of an RDS instance being of the desired type in AWS, you can follow these steps using the AWS Management Console:
- Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/) and login using your credentials.
- Navigate to RDS Service: Click on the “Services” dropdown in the top navigation bar and select “RDS” under the Database category.
- Identify the RDS Instance: In the RDS dashboard, locate the RDS instance that needs to be remediated in terms of its type.
- Modify the Instance: Select the RDS instance by clicking on its name. In the instance details page, click on the “Modify” button at the top.
- Choose Instance Type: In the Modify DB Instance window, scroll down to the “DB Instance Class” section. Here, you can select the desired instance type from the dropdown list.
- Confirm and Apply Changes: After selecting the desired instance type, scroll down to the bottom of the page and click on the “Continue” button. Review the summary of changes and click on the “Modify DB Instance” button to apply the changes.
- Monitor the Modification: The modification process will start, and you can monitor the progress in the RDS dashboard. Once the modification is completed, the RDS instance will be of the desired type.
Using CLI
Using CLI
To remediate the misconfiguration of an RDS instance not being of the desired type in AWS using AWS CLI, follow these steps:
-
Identify the current instance type:
Run the following AWS CLI command to describe the RDS instance and note down the current instance type:
- Choose the desired instance type: Determine the desired instance type that you want to change the RDS instance to. You can refer to the AWS documentation for available RDS instance types.
-
Modify the RDS instance:
Use the following AWS CLI command to modify the RDS instance to the desired instance type:
-
Monitor the modification:
Monitor the modification progress by running the following command:
-
Verify the instance type:
Once the modification is completed, verify that the RDS instance is now of the desired type by running the describe command again:
Using Python
Using Python
To remediate the misconfiguration of an RDS instance not being of the desired type in AWS using Python, you can use the AWS SDK for Python (Boto3) to modify the instance type. Here are the step-by-step instructions:
- Install Boto3: Before you can start using Boto3 in Python, you need to install it. You can install it using pip:
- Configure AWS Credentials: Make sure you have your AWS credentials configured either through environment variables, AWS CLI, or IAM roles.
- Write Python script to modify RDS instance type: Create a Python script with the following code to modify the RDS instance type:
-
Replace the placeholders:
Replace
your_rds_instance_identifierwith the actual RDS instance identifier anddb.t2.largewith the desired instance class. - Run the Python script: Save the Python script and run it. It will modify the RDS instance to the desired instance type.

