DMS Replication Auto Minor Version Upgrade Should Be Enabled

More Info:

Checks if an AWS Database Migration Service (AWS DMS) replication instance has automatic minor version upgrades enabled. The rule is NON_COMPLIANT if an AWS DMS replication instance is not configured with automatic minor version upgrades.

Risk Level

Low

Address

Configuration

Compliance Standards

CBP,SEBI

Triage and Remediation

Remediation

To remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using the AWS console, follow these steps:

Login to AWS Console: Go to the AWS Management Console and login using your credentials.
Navigate to RDS Service: Click on the “Services” dropdown menu at the top left corner and select “RDS” under the Database section.
Select the RDS Instance: From the list of RDS instances, select the RDS instance for which you want to enable DMS Replication Auto Minor Version Upgrade.
Enable Auto Minor Version Upgrade:
- In the RDS dashboard for the selected instance, click on the “Modify” button at the top.
- Scroll down to the “Backup” section, and find the “Maintenance” dropdown.
- In the Maintenance dropdown, select the option “Enable auto minor version upgrade”.
- Click on the “Apply immediately” checkbox if you want the changes to take effect immediately. Otherwise, the changes will be applied during the next maintenance window.
- Click on the “Continue” button.
Review and Apply Changes:
- Review the changes you are about to make to ensure that you are enabling the DMS Replication Auto Minor Version Upgrade.
- Scroll down and click on the “Modify DB Instance” button to apply the changes.
Monitor the Status: Once you have applied the changes, monitor the status of the RDS instance to ensure that the DMS Replication Auto Minor Version Upgrade is successfully enabled.

By following these steps, you can successfully remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using the AWS console.

To remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using AWS CLI, you can follow these steps:

Check the current setting: Run the following AWS CLI command to check the current setting for DMS Replication Auto Minor Version Upgrade:
```
aws dms describe-replication-instances --filters Name=replication-instance-id,Values=<REPLICATION_INSTANCE_ID>
```
Enable Auto Minor Version Upgrade: If the Auto Minor Version Upgrade is not enabled, you can enable it using the following AWS CLI command:
```
aws dms modify-replication-instance --replication-instance-arn <REPLICATION_INSTANCE_ARN> --apply-immediately --replication-instance-identifier <REPLICATION_INSTANCE_IDENTIFIER> --auto-minor-version-upgrade
```
Make sure to replace <REPLICATION_INSTANCE_ARN> and <REPLICATION_INSTANCE_IDENTIFIER> with the actual ARN and identifier of your replication instance.
Verify the Change: Run the describe-replication-instances command again to verify that the Auto Minor Version Upgrade is now enabled:
```
aws dms describe-replication-instances --filters Name=replication-instance-id,Values=<REPLICATION_INSTANCE_ID>
```
Monitor the Replication Instance: Keep an eye on the replication instance after enabling Auto Minor Version Upgrade to ensure that it is functioning as expected without any issues.

By following these steps, you should be able to remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using AWS CLI.

To remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using Python, you can use the AWS SDK for Python (Boto3) to update the DB cluster parameter group associated with your RDS instance. Follow these steps to enable the DMS Replication Auto Minor Version Upgrade:

Install Boto3: If you haven’t already installed the Boto3 library, you can do so using pip:
```
pip install boto3
```

Write a Python script to update the DB cluster parameter group:

import boto3

# Define the AWS region and the name of the RDS DB cluster
region = 'your_aws_region'
db_cluster_identifier = 'your_db_cluster_identifier'

# Create a RDS client
rds_client = boto3.client('rds', region_name=region)

# Get the current DB cluster parameter group for the RDS instance
response = rds_client.describe_db_clusters(
    DBClusterIdentifier=db_cluster_identifier
)
db_cluster_parameter_group = response['DBClusters'][0]['DBClusterParameterGroup']

# Modify the parameter group to enable DMS Replication Auto Minor Version Upgrade
response = rds_client.modify_db_cluster_parameter_group(
    DBClusterParameterGroupName=db_cluster_parameter_group,
    Parameters=[
        {
            'ParameterName': 'dms_auto_minor_version_upgrade',
            'ParameterValue': 'enabled',
            'ApplyMethod': 'immediate'
        },
    ]
)

print("DMS Replication Auto Minor Version Upgrade has been enabled for the RDS instance.")

Replace 'your_aws_region' and 'your_db_cluster_identifier' with your AWS region and RDS DB cluster identifier in the script.
Run the Python script to enable the DMS Replication Auto Minor Version Upgrade for your AWS RDS instance.

By following these steps, you can remediate the misconfiguration of DMS Replication Auto Minor Version Upgrade not being enabled for AWS RDS using Python and the Boto3 library.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

DMS Replication Auto Minor Version Upgrade Should Be Enabled

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

Remediation

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation