Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

Aurora PostgreSQL cluster should enforce TLS connections

AWS_RDS_020 HIGH Security

What it checks

Aurora PostgreSQL cluster: desired TLS enforcement is disabled or cannot be verified.

Where it applies

Terraform: aws_rds_cluster

CloudFormation: AWS::RDS::DBCluster

How to fix it

  1. Set rds.force_ssl to 1 in the cluster's selected compatible custom DB cluster parameter group. Validate client TLS support and review required apply/reboot steps; desired configuration does not prove deployed enforcement.

Vendor documentation

All rules