All checks
Medium
DMS endpoints for Neptune databases should have IAM authorization enabled
Verifies that AWS DMS endpoints for Neptune databases use IAM authorization, enabling fine-grained access control through a service access role.
- service
- DMS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable IAM authorization for your DMS endpoints that connect to Neptune databases to ensure fine-grained access control.
- Navigate to the AWS DMS console
- Go to the Endpoints section
- Select the Neptune endpoint that needs IAM authorization
- Modify the endpoint configuration
- In the 'Authentication' section, enable 'IAM database authentication'
- Configure the 'Service access role ARN' parameter
- Ensure the IAM role has appropriate permissions for Neptune access
- Save the configuration changes
- Verify that IAM authorization is now enabled for the Neptune endpoint
See which of your accounts this check is failing on.
Book a demo