Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Relational Database Service/ RDS Instances Have SSL Enabled
Updated on 2025-08-25 GMT+08:00
View PDF
Share

RDS Instances Have SSL Enabled

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

rds-instance-ssl-enable

Identifier

rds-instance-ssl-enable

Description

If SSL is not enabled for an RDS instance, this instance is non-compliant.

Tag

rds

Trigger Type

Configuration change

Filter Type

rds.instances

Rule Parameters

None

Application Scenarios

Without the use of Secure Sockets Layer (SSL), data transmitted between an RDS instance and server is vulnerable to eavesdropping, tampering, and man-in-the-middle attacks. To improve data transmission security, you are advised to add the REQUIRE SSL attribute to database users and enable SSL encryption. For details, see Security Best Practices

Solution

Perform the following steps to enable SSL encryption for RDS instances:

Rule Logic

  • If SSL is disabled for an RDS DB instance, this instance is non-compliant.
  • If SSL is enabled for an RDS DB instance, this instance is compliant.