All checks
Medium
RDS database instances should use a custom administrator username
Flags RDS database instances whose master username is admin, root, sa, oracle or postgres, in any letter case. These are the names tried first, so an instance using one leaves an attacker only the password to guess.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Create database → Settings → Credentials settings
With Terraform
resource "aws_db_instance" "this" {
instance_class = var.instance_class
username = var.master_username
}See which of your accounts this check is failing on.
Book a demo