RDS Database Security Group Modification

jamesc-grafana

Detects changes to the security group entries for RDS databases. This can indicate that a misconfiguration has occurred which potentially exposes the database to the public internet, a wider audience within the VPC or that removal of valid rules has occurred which could impact the availability of the database to legitimate services and users.

2024-07-11 00:00:00

None

14f3f1c8-02d5-43a2-a191-91ffb52d3015

attack.initial-access attack.t1190

Community Rule

Nasreddine Bencherchali

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12

James C

Merge PR #4900 from @jamesc-grafana - Add new AWS cloudtrail rules

2024-07-11