maulik-modi22
commented
10 months ago +1 This will accelerate time to provision Aws RDS instance with database activity stream and meet compliance.
once implemented, We can stay with PURE Declarative infrastructure -
- [x] easy to write
- [x] easy to review
- [x] easy to audit
- [x] easy to execute
Current workaround requires executing CLI command using Lambda custom resource which ALWAYS requires
- application security checks
- complex code scrutiny
- policy setup
- burden of testability
- longer test cycle
- code maintenance
requiring custom development.
Name of the resource
AWS::RDS::DBInstance
Resource name
No response
Description
Amazon RDS DB instance supports database activity stream to audit database activity.
This is possible via Console or CLI/API as we can see in the referenced doc. However, it is not available in the CloudFormation Resource Type AWS::RDS::DBInstance .
This is a request to add the feature in CloudFormation for the Resource Type
AWS::RDS::DBInstance.Related GH issue(FR) #1596 for AWS::RDS::DBCluster
Other Details
No response