Rule: RDS DB Instance and Cluster Enhanced Monitoring Should be Enabled

Rule Description: Enable RDS DB instance and cluster enhanced monitoring for NIST 800-53 Revision 5 compliance.

Rule Details:

Troubleshooting Steps:

2. 1.

   Verify IAM Permissions: Ensure that you have appropriate IAM (Identity and Access Management) permissions to enable enhanced monitoring for RDS DB instances and clusters. Check if your IAM user or role has the required permissions to modify RDS resources.

4. 2.

   Check RDS Engine Compatibility: Confirm that the RDS DB engine you are using is compatible with enhanced monitoring. Not all RDS engine versions support this feature. Refer to AWS documentation to determine the compatibility of your RDS engine.

6. 3.

   Check RDS Instance/Cluster Status: Ensure that your RDS DB instance or cluster is in an available state. Enhanced monitoring cannot be enabled if the resource is in a state other than available.

8. 4.

   Review RDS Logs: If you encounter any errors or issues during the process, review the RDS logs for the respective resource. RDS logs provide detailed information about events, errors, and diagnostic data related to your RDS resources.

Necessary Codes:

Step-by-Step Guide:

Option 1: Enable Enhanced Monitoring via AWS Management Console:

2. 1.
   Sign in to the AWS Management Console.
4. 2.
   Open the Amazon RDS console at https://console.aws.amazon.com/rds/.
6. 3.
   Select the appropriate region where your RDS DB instance or cluster is located.
8. 4.
   In the navigation pane, choose "Databases" for RDS instances or "Clusters" for RDS clusters.
10. 5.
    Select the target DB instance or cluster.
12. 6.
    Click on "Actions" and choose "Modify".
14. 7.
    Scroll down to the "Monitoring and Performance Insights" section.
16. 8.
    Under "Enhanced monitoring", select "Enabled" and adjust the desired settings.
18. 9.
    Click on "Continue" and review the modifications.
20. 10.
    After verifying the changes, click on "Modify DB Instance/Cluster" to apply the enhanced monitoring configuration.

Option 2: Enable Enhanced Monitoring via AWS CLI:

2. 1.
   Install and configure AWS CLI, if not already set up.
4. 2.
   Open a terminal or command prompt.
6. 3.
   Run the following command to enable enhanced monitoring for an RDS DB instance:

   aws rds modify-db-instance --db-instance-identifier [DB_INSTANCE_IDENTIFIER] --enable-enhanced-monitoring --apply-immediately
   

   Replace

   [DB_INSTANCE_IDENTIFIER]

   with the actual identifier of your RDS DB instance.
8. 4.
   Alternatively, use the following command to enable enhanced monitoring for an RDS cluster:

   aws rds modify-db-cluster --db-cluster-identifier [DB_CLUSTER_IDENTIFIER] --enable-enhanced-monitoring
   

   Replace

   [DB_CLUSTER_IDENTIFIER]

   with the actual identifier of your RDS cluster.

Option 3: Enable Enhanced Monitoring via AWS SDKs:

2. 1.
   Choose the appropriate SDK for your preferred programming language and install it.
4. 2.
   Include the necessary SDK libraries in your code.
6. 3.
   Use the SDK methods to modify the RDS DB instance or cluster configuration and enable enhanced monitoring. Refer to the SDK documentation and examples for the specific language to implement the changes.

Conclusion: