More Info:

Amazon RDS event notification subscriptions should be enabled for database instance level events.

Risk Level

Low

Address

Reliability, Operational Maturity, Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration of Event Notification Subscriptions not being enabled for an AWS RDS instance using the AWS console, follow these steps:

  1. Login to AWS Console: Go to the AWS Management Console (https://aws.amazon.com/console/) and login using your credentials.

  2. Navigate to RDS Service: From the AWS Management Console, navigate to the RDS service by clicking on “Services” in the top left corner, then selecting “RDS” under the Database category.

  3. Select the RDS Instance: In the RDS dashboard, select the RDS instance for which you want to enable Event Notification Subscriptions by clicking on the checkbox next to the instance.

  4. Enable Event Notification Subscriptions: With the RDS instance selected, click on the “Modify” button from the top menu to modify the instance settings.

  5. Scroll down to Event Subscriptions: In the Modify DB Instance window, scroll down to the “Event Subscriptions” section.

  6. Add Event Subscription: Click on the “Add Event Subscription” button to create a new event subscription for the RDS instance.

  7. Configure Event Subscription: Configure the event subscription by selecting the events you want to be notified about, the SNS topic to which the notifications should be sent, and any other relevant settings.

  8. Save Changes: Once you have configured the event subscription, click on the “Add Event Subscription” button to save the changes.

  9. Verify Configuration: After saving the changes, verify that the Event Notification Subscription has been successfully enabled for the RDS instance by checking the Event Subscriptions section in the RDS dashboard.

By following these steps, you will successfully remediate the misconfiguration of Event Notification Subscriptions not being enabled for an AWS RDS instance using the AWS console.

Additional Reading: