prowler-cloud / prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
https://prowler.com
Apache License 2.0
10.73k stars 1.53k forks source link

Exclude the Aurora cluster reader and writer for the check "Check if RDS instances are protected by a backup plan" #5434

Open serhii-ciq opened 4 days ago

serhii-ciq commented 4 days ago

Steps to Reproduce

This check Check if RDS instances are protected by a backup plan should exclude readers and writers and controls only backup plan for the Aurora cluster

Just run the prowler with check rds_instance_protected_by_backup_plan

Expected behavior

No findings for Aurora cluster reader and writer

Actual Result with Screenshots or Logs

image

How did you install Prowler?

From pip package (pip install prowler)

Environment Resource

Workstation, EC2 instance

OS used

Windows, Amazon Linux

Prowler version

Prowler 4.4.0 (latest is 4.4.1, upgrade for the latest features)

Pip version

pip 24.2 (python 3.12)

Context

No response

sergargar commented 4 days ago

Hi @serhii-ciq, thanks for letting us know this issue. What types of RDS instance are you expecting Prowler to flag?