RDS DB clusters should have automatic minor version upgrade enabled
Ensures automatic minor version upgrade is enabled on RDS DB clusters, including Aurora, so the cluster and its instances receive minor version patches in the maintenance window. On Aurora the cluster reads off while any of its instances has the setting off, so a finding that returns after the fix means an instance was turned off.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Databases → the DB cluster → Modify → Maintenance
With the AWS CLI
aws rds modify-db-cluster --db-cluster-identifier <db-cluster-id> --auto-minor-version-upgrade --region <region>With Terraform
resource "aws_rds_cluster" "this" {
engine = var.engine
auto_minor_version_upgrade = true
}
See which of your accounts this check is failing on.
Book a demo