Updated on 2025-08-25 GMT+08:00

RDS Instances Are in the Specified VPC

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

rds-instances-in-vpc

Identifier

RDS Instances Are in the Specified VPC

Description

If an RDS instance is not in the specified VPC, this instance is non-compliant.

Tag

rds

Trigger Type

Configuration change

Filter Type

rds.instances

Rule Parameters

vpcId: VPC ID of an RDS instance

Application Scenarios

A VPC is a private network on the cloud. You can create VPCs to logically isolate your RDS instances. For more details, see What Is Virtual Private Cloud?

Solution

VPCs or subnets of RDS instances cannot be changed after creation. Use an RDS backup to create a new RDS instance and deploy the instance to the desired VPC and subnet. For details, see Restoring a DB Instance from Backups.

Rule Logic

  • If an RDS instance is not in the specified VPC, this instance is non-compliant.
  • If an RDS instance is in the specified VPC, this instance is compliant.