More Info:

Your RDS database instances should have the Auto Minor Version Upgrade flag enabled in order to receive automatically minor engine upgrades during the specified maintenance window

Risk Level

Low

Address

Security

Compliance Standards

AWSWAF, SOC2, NISTCSF

Triage and Remediation

Remediation

To remediate the misconfiguration of the “Auto Minor Version Upgrade” flag not being enabled for an AWS RDS instance using the AWS Management Console, follow these steps:

  1. Sign in to the AWS Management Console: Go to https://aws.amazon.com/ and sign in to the AWS Management Console using your credentials.

  2. Navigate to the RDS Dashboard: Click on the “Services” dropdown menu at the top of the page, select “RDS” under the Database category.

  3. Select the RDS Instance: From the list of RDS instances, select the instance for which you want to enable the “Auto Minor Version Upgrade” flag by clicking on its identifier.

  4. Modify the Instance: In the RDS dashboard for the selected instance, click on the “Modify” button located in the top right corner of the page.

  5. Enable Auto Minor Version Upgrade: Scroll down to the “Backup” section of the Modify DB Instance page. Here, you will find the “Auto minor version upgrade” option. Check the box next to this option to enable automatic minor version upgrades for your RDS instance.

  6. Save Changes: Scroll to the bottom of the page and click on the “Continue” button.

  7. Apply Changes: Review the changes you are about to make and click on the “Modify DB Instance” button to apply the changes.

  8. Monitor the Status: Once the modification is complete, monitor the status of the RDS instance to ensure that the “Auto Minor Version Upgrade” flag is now enabled.

By following these steps, you have remediated the misconfiguration of the “Auto Minor Version Upgrade” flag not being enabled for your AWS RDS instance using the AWS Management Console.

Additional Reading: