Controls
10 controls from FedRAMP Moderate Baseline Rev 4 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 AU-6(1)(3) | AU-6(1)(3) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled None | None | |
| RDS DB instances and clusters should have enhanced monitoring enabledrds_db_instance_and_cluster_enhanced_monitoring_enabled CA-7(a)(b) | CA-7(a)(b) | |
| RDS DB instance backup should be enabledrds_db_instance_backup_enabled CP-9(b) | CP-9(b) | |
| RDS DB instances backup retention period should be greater than or equal to 7rds_db_instance_backup_retention_period_less_than_7 CP-9(b) | CP-9(b) | |
| RDS DB instances should be integrated with CloudWatch logsrds_db_instance_cloudwatch_logs_enabled AC-2(4) | AC-2(4) | |
| RDS DB instances should have deletion protection enabledrds_db_instance_deletion_protection_enabled None | None | |
| RDS DB instance encryption at rest should be enabledrds_db_instance_encryption_at_rest_enabled None | None | |
| RDS DB instances should have multiple AZ enabledrds_db_instance_multiple_az_enabled None | None | |
| RDS DB instances should not use public subnetrds_db_instance_no_public_subnet AC-17(1) | AC-17(1) |