AWS RDS Terraform module

Upstream version 7.2.2
11 controls from HIPAA Omnibus Rule 2013 requirements

Terraform Module Source

hipaa.compliance.tf/terraform-aws-modules/rds/aws
ComplianceInputsOutputsResourcesRulesDiff (0)README
CloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365164.312(b)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled164.308(a)(1)(ii)(B)
Framework requirement
RDS DB instances and clusters should have enhanced monitoring enabled
rds_db_instance_and_cluster_enhanced_monitoring_enabled164.312(b)
Framework requirement
RDS DB instance backup should be enabled
rds_db_instance_backup_enabled164.308(a)(1)(ii)(B)
Framework requirement
RDS DB instances backup retention period should be greater than or equal to 7
rds_db_instance_backup_retention_period_less_than_7164.308(a)(1)(ii)(B)
Framework requirement
RDS DB instances should be integrated with CloudWatch logs
rds_db_instance_cloudwatch_logs_enabled164.308(a)(4)(ii)(A)
Framework requirement
RDS DB instances should have deletion protection enabled
rds_db_instance_deletion_protection_enabled164.308(a)(7)(ii)(C)
Framework requirement
RDS DB instance encryption at rest should be enabled
rds_db_instance_encryption_at_rest_enabled164.308(a)(1)(ii)(B)
Framework requirement
RDS DB instances should have iam authentication enabled
rds_db_instance_iam_authentication_enabled164.308(a)(4)(i)
Framework requirement
RDS DB instances should have multiple AZ enabled
rds_db_instance_multiple_az_enabled164.308(a)(1)(ii)(B)
Framework requirement
RDS DB instances should not use public subnet
rds_db_instance_no_public_subnet164.308(a)(3)(i)
Framework requirement