AWS RDS Terraform module
Upstream version 7.2.0
9 controls from Title 21 CFR Part 11 requirements
Terraform Module Source
cfrpart11.compliance.tf/terraform-aws-modules/rds/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_36511.10(c)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled11.30
Framework requirement
RDS DB instance backup should be enabled
rds_db_instance_backup_enabled11.10(a)
Framework requirement
RDS DB instances backup retention period should be greater than or equal to 7
rds_db_instance_backup_retention_period_less_than_711.10(a)
Framework requirement
RDS DB instances should be integrated with CloudWatch logs
rds_db_instance_cloudwatch_logs_enabled11.10(e)
Framework requirement
RDS DB instances should have deletion protection enabled
rds_db_instance_deletion_protection_enabled11.10(a)
Framework requirement
RDS DB instance encryption at rest should be enabled
rds_db_instance_encryption_at_rest_enabled11.10(c)
Framework requirement
RDS DB instances should have multiple AZ enabled
rds_db_instance_multiple_az_enabled11.10(a)
Framework requirement
RDS DB instances should not use public subnet
rds_db_instance_no_public_subnet11.10(d)
Framework requirement