@pulumi/aws-compliance-policies/aws/rds/index.d.ts

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

import { ResourceValidationPolicy } from "@pulumi/policy";
declare namespace Cluster {
    /**
     * Checks that RDS Cluster backup retention policy is configured.
     *
     * @severity medium
     * @frameworks iso27001, pcidss
     * @topics backup, resilience
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupRetention
     */
    const configureBackupRetention: ResourceValidationPolicy;
    /**
     * Checks that RDS Clusters storage uses a customer-managed KMS key.
     *
     * @severity low
     * @frameworks hitrust, iso27001, pcidss
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
     */
    const configureCustomerManagedKey: ResourceValidationPolicy;
    /**
     * Check that RDS Cluster doesn't use single availability zone.
     *
     * @severity high
     * @frameworks hitrust
     * @topics availability
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/multi-az-db-clusters-concepts.html
     */
    const disallowSingleAvailabilityZone: ResourceValidationPolicy;
    /**
     * Checks that RDS Clusters storage is encrypted.
     *
     * @severity high
     * @frameworks hitrust, iso27001, pcidss
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
     */
    const disallowUnencryptedStorage: ResourceValidationPolicy;
    /**
     * Checks that RDS Clusters backup retention policy is enabled.
     *
     * @severity medium
     * @frameworks hitrust, iso27001, pcidss
     * @topics backup, resilience
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupRetention
     */
    const enableBackupRetention: ResourceValidationPolicy;
}
export { Cluster };
declare namespace ClusterInstance {
    /**
     * Checks that RDS Cluster Instances public access is not enabled.
     *
     * @severity critical
     * @frameworks hitrust, iso27001, pcidss
     * @topics network
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_CommonTasks.Connect.html
     */
    const disallowPublicAccess: ResourceValidationPolicy;
    /**
     * Checks that RDS Cluster Instances performance insights is encrypted.
     *
     * @severity high
     * @frameworks none
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
     */
    const disallowUnencryptedPerformanceInsights: ResourceValidationPolicy;
    /**
     * Checks that RDS Cluster Instances have performance insights enabled.
     *
     * @severity low
     * @frameworks none
     * @topics logging, performance
     * @link https://aws.amazon.com/rds/performance-insights/
     */
    const enablePerformanceInsights: ResourceValidationPolicy;
}
export { ClusterInstance };
declare namespace Instance {
    /**
     * Checks that backup retention policy is adequate.
     *
     * @severity medium
     * @frameworks iso27001, pcidss
     * @topics backup, resilience
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupRetention
     */
    const configureBackupRetention: ResourceValidationPolicy;
    /**
     * Checks that RDS Instance storage uses a customer-managed KMS key.
     *
     * @severity low
     * @frameworks hitrust, iso27001, pcidss
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
     */
    const configureCustomerManagedKey: ResourceValidationPolicy;
    /**
     * Checks that RDS Instance public access is not enabled.
     *
     * @severity critical
     * @frameworks hitrust, iso27001, pcidss
     * @topics network
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_CommonTasks.Connect.html
     */
    const disallowPublicAccess: ResourceValidationPolicy;
    /**
     * Checks that RDS Instance performance insights is encrypted.
     *
     * @severity high
     * @frameworks none
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.htm
     */
    const disallowUnencryptedPerformanceInsights: ResourceValidationPolicy;
    /**
     * Checks that RDS instance storage is encrypted.
     *
     * @severity high
     * @frameworks hitrust, iso27001, pcidss
     * @topics encryption, storage
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
     */
    const disallowUnencryptedStorage: ResourceValidationPolicy;
    /**
     * Checks that RDS Instances backup retention policy is enabled.
     *
     * @severity medium
     * @frameworks hitrust, iso27001, pcidss
     * @topics backup, resilience
     * @link https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupRetention
     */
    const enableBackupRetention: ResourceValidationPolicy;
    /**
     * Checks that RDS instances have performance insights enabled.
     *
     * @severity low
     * @frameworks none
     * @topics logging, performance
     * @link https://aws.amazon.com/rds/performance-insights/
     */
    const enablePerformanceInsights: ResourceValidationPolicy;
}
export { Instance };