bolotkgs89/audit-aws-rds

rds audit

This composite monitors rds and reports best practice violations, standards body policy violations, and inventory

Description

This composite monitors rds against best practices and reports violations and inventory

Hierarchy

Required variables with no default

None

Required variables with default

AUDIT_AWS_RDS_ALLOW_EMPTY:

• description: Would you like to receive empty reports? Options - true / false. Default is false.
• default: false

AUDIT_AWS_RDS_SEND_ON:

• description: Send reports always or only when there is a change? Options - always / change. Default is change.
• default: change

AUDIT_AWS_RDS_REGIONS:

• description: List of AWS regions to check. Default is all regions. Choices are us-east-1,us-east-2,us-west-1,us-west-2,ca-central-1,ap-south-1,ap-northeast-2,ap-southeast-1,ap-southeast-2,ap-northeast-1,eu-central-1,eu-west-1,eu-west-1,sa-east-1
• default: us-east-1, us-east-2, us-west-1, us-west-2, ca-central-1, ap-south-1, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-northeast-1, eu-central-1, eu-west-1, eu-west-2, sa-east-1

Optional variables with default

AUDIT_AWS_RDS_ALERT_LIST:

• description: Which rules would you like to run? Possible values are rds-inventory rds-short-backup-retention-period rds-no-auto-minor-version-upgrade rds-db-publicly-accessible
• default: rds-short-backup-retention-period, rds-no-auto-minor-version-upgrade, rds-db-publicly-accessible

AUDIT_AWS_RDS_OWNER_TAG:

• description: Enter an AWS tag whose value is an email address of owner of the RDS object. (Optional)
• default: NOT_A_TAG

Optional variables with no default

HTML_REPORT_SUBJECT:

• description: Enter a custom report subject name.

AUDIT_AWS_RDS_ALERT_RECIPIENT:

• description: Enter the email address(es) that will receive notifiers. If more than one, separate each with a comma.

FILTERED_OBJECTS:

• description: JSON object of string or regex of aws objects to include or exclude and tag in audit

AUDIT_AWS_RDS_S3_NOTIFICATION_BUCKET_NAME:

• description: Enter S3 bucket name to upload reports. (Optional)

Tags

1. Audit
2. Best Practices
3. Inventory
4. rds

Categories

1. AWS Services Audit

Diagram

Icon