All checks
Medium RDS · regional

RDS DB clusters should have automatic minor version upgrade enabled

Ensures automatic minor version upgrade is enabled on RDS DB clusters, including Aurora, so the cluster and its instances receive minor version patches in the maintenance window. On Aurora the cluster reads off while any of its instances has the setting off, so a finding that returns after the fix means an instance was turned off.

service
RDS
severity
Medium
scope
evaluated in every region

How to fix it

In the console

RDS → Databases → the DB cluster → Modify → Maintenance

With the AWS CLI

aws rds modify-db-cluster --db-cluster-identifier <db-cluster-id> --auto-minor-version-upgrade --region <region>

With Terraform

resource "aws_rds_cluster" "this" {
  engine                     = var.engine
  auto_minor_version_upgrade = true
}

See which of your accounts this check is failing on.

Book a demo