All checks
Medium
RDS for PostgreSQL DB instances should be encrypted in transit
Checks that RDS for PostgreSQL DB instances set rds.force_ssl to 1 in their DB parameter group. With it on, the database rejects any connection that does not use SSL/TLS, so credentials and query data do not cross the network in clear text.
- service
- RDS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
RDS → Parameter groups → the group attached to the DB instance
With the AWS CLI
aws rds modify-db-parameter-group --db-parameter-group-name <parameter-group-name> --parameters ParameterName=rds.force_ssl,ParameterValue=1,ApplyMethod=immediate --region <region>With Terraform
resource "aws_db_parameter_group" "this" {
name = var.parameter_group_name
family = var.family
parameter {
name = "rds.force_ssl"
value = "1"
}
}See which of your accounts this check is failing on.
Book a demo