RDS resource should not be publicly accessible

What it checks

RDS database: public address capability is enabled.

Where it applies

Terraform: aws_db_instance, aws_rds_cluster_instance, aws_rds_cluster

CloudFormation: AWS::RDS::DBInstance, AWS::RDS::DBCluster

How to fix it

1. Set this database resource's public-access property to false (`publicly_accessible` in Terraform or `PubliclyAccessible` in CloudFormation).
2. Ensure client subnets reach the DB via VPC routing or a private bastion

Frameworks

• AWS FSBP RDS.2
• SOC 2 CC6.1
• SOC 2 CC6.6
• SOC 2 CC6.3
• PCI-DSS v4.0.1/1.4.4
• HIPAA 164.312(a)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules