All checks
Medium
RDS for MySQL DB instances should be encrypted in transit
Checks that RDS for MySQL DB instances set require_secure_transport to 1 in their DB parameter group. With it on, the database refuses any connection that does not use SSL/TLS, so credentials and query data do not cross the network in clear text.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Parameter groups → the group attached to the DB instance
With the AWS CLI
aws rds modify-db-parameter-group --db-parameter-group-name <parameter-group-name> --parameters ParameterName=require_secure_transport,ParameterValue=1,ApplyMethod=immediate --region <region>With Terraform
resource "aws_db_parameter_group" "this" {
name = var.parameter_group_name
family = var.family
parameter {
name = "require_secure_transport"
value = "1"
}
}See which of your accounts this check is failing on.
Book a demo