IAM DB authentication Should Be Enabled
More Info:
IAM Database Authentication feature should be enabled in order to use AWS Identity and Access Management (IAM) service to manage database access to your Amazon RDS MySQL and PostgreSQL instancesRisk Level
MediumAddress
SecurityCompliance Standards
SOC2, HITRUST, NISTCSF, PCIDSSTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of IAM DB authentication not being enabled for AWS RDS using the AWS console, follow these steps:
- Login to AWS Console: Go to the AWS Management Console and login with your credentials.
- Navigate to RDS Service: From the console dashboard, navigate to the RDS service by clicking on the “Services” dropdown and selecting “RDS” under the Database category.
- Select the RDS Instance: In the RDS dashboard, select the RDS instance for which you want to enable IAM DB authentication.
- Modify the Instance: Click on the instance name to open the instance details. Then, click on the “Modify” button to make changes to the instance settings.
- Enable IAM DB Authentication: Scroll down to the “Additional configuration” section in the Modify DB Instance page. Look for the “IAM DB authentication” option and set it to “Enable” by checking the box next to it.
- Apply the Changes: Scroll to the bottom of the page and click on the “Continue” button to proceed with modifying the instance.
- Review and Apply Changes: Review the changes you are about to make and click on the “Modify DB Instance” button to apply the changes.
- Verify IAM DB Authentication: Once the modification is complete, go back to the RDS instance details page and verify that IAM DB authentication is now enabled for the instance.
Using CLI
Using CLI
To remediate the misconfiguration of IAM DB authentication not being enabled for an AWS RDS instance using the AWS CLI, follow these steps:Replace This command will return
- Enable IAM DB Authentication using the AWS CLI:
<your-db-instance-identifier> with the identifier of your RDS instance.- Check the status of IAM DB Authentication:
true if IAM DB Authentication is successfully enabled.-
Verify IAM DB Authentication in AWS Management Console:
- Go to the AWS Management Console and navigate to the RDS service.
- Select your RDS instance.
- In the “Configuration” section, verify that IAM DB Authentication is enabled.
Using Python
Using Python
To enable IAM DB authentication for an AWS RDS instance using Python, you can use the AWS SDK for Python (Boto3). Follow these steps to remediate the misconfiguration:
- Install Boto3:
- Create a Python script with the following code:
-
Replace
'us-east-1'with the appropriate region where your RDS instance is located and'your-db-instance-identifier'with the actual identifier of your RDS instance. - Run the Python script. This will enable IAM DB authentication for the specified RDS instance.