All checks
Medium
RDS for MariaDB DB instances should be encrypted in transit
Checks that RDS for MariaDB DB instances set require_secure_transport to 1 in their DB parameter group, so the database refuses any connection that does not use SSL/TLS. The parameter exists only from MariaDB 10.5, so an older instance fails until it is upgraded.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Parameter groups → the group attached to the DB instance
With the AWS CLI
aws rds modify-db-parameter-group --db-parameter-group-name <parameter-group-name> --parameters ParameterName=require_secure_transport,ParameterValue=1,ApplyMethod=immediate --region <region>With Terraform
resource "aws_db_parameter_group" "this" {
name = var.parameter_group_name
family = var.family
parameter {
name = "require_secure_transport"
value = "1"
}
}See which of your accounts this check is failing on.
Book a demo