RDS production instance should have Multi-AZ enabled

What it checks

RDS production instance should have Multi-AZ enabled

Where it applies

Terraform: aws_db_instance

CloudFormation: AWS::RDS::DBInstance

How to fix it

1. Remove any authored availability_zone, then set multi_az = true. Verify the DB subnet group spans at least two AZs.

Frameworks

• AWS FSBP RDS.5
• SOC 2 A1.2
• SOC 2 CC7.4
• HIPAA 164.308(a)(7)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules