rds-snapshots-public-prohibited

Checks if Amazon Relational Database Service (Amazon RDS) snapshots are public. The rule is NON_COMPLIANT if any existing and new Amazon RDS snapshots are public.

Note

It can take up to 12 hours for compliance results to be captured.

Identifier: RDS_SNAPSHOTS_PUBLIC_PROHIBITED

Trigger type: Configuration changes

Evaluated resource types: AWS::RDS::DBSnapshot and AWS::RDS::DBClusterSnapshot

AWS Region: All supported AWS Regions except Africa (Cape Town) and Europe (Milan)

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.