القائمة
Ensure the Auto Minor Version Upgrade feature is enabled for RDS instances
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-foundations-3-2-2يبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| name | cis-aws-foundations-3.2.2 |
| description | Ensure the Auto Minor Version Upgrade feature is enabled for RDS instances |
| category | cis-storage |
| version | 7.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","storage","rds","patching","auto-upgrade","version-management"] |
| cis_id | 3.2.2 |
| cis_benchmark | CIS AWS Foundations Benchmark v7.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-foundations-3.2.1","cis-aws-foundations-3.2.3","cis-aws-foundations-3.2.4"] |
| prerequisites | [] |
| severity_boost | {} |
Ensure that RDS database instances have the Auto Minor Version Upgrade flag enabled to automatically receive minor engine upgrades during the specified maintenance window. This way, RDS instances can obtain new features, bug fixes, and security patches for their database engines.
AWS RDS will occasionally deprecate minor engine versions and provide new ones for upgrades. When the last version number within a release is replaced, the changed version is considered minor. With the Auto Minor Version Upgrade feature enabled, version upgrades will occur automatically during the specified maintenance window, allowing your RDS instances to receive new features, bug fixes, and security patches for their database engines.
Automatic minor version upgrades may introduce changes during maintenance windows. For critical production databases, consider testing upgrades in a staging environment first.
Databases.Maintenance and backups panel.Maintenance section, search for the Auto Minor Version Upgrade status.
Disabled, it means that the feature is not enabled, and the minor engine upgrades released will not be applied to the selected RDS instance.describe-db-instances command to list all RDS database names available in the selected AWS region:aws rds describe-db-instances --region --query 'DBInstances[*].[DBInstanceIdentifier,AutoMinorVersionUpgrade]' --output table
The command output should return each database instance identifier.
Run the describe-db-instances command again using a RDS instance identifier returned earlier to determine the Auto Minor Version Upgrade status for the selected instance:
aws rds describe-db-instances --region <region-name> --db-instance-identifier <db-instance-identifier> --query 'DBInstances[*].AutoMinorVersionUpgrade'
true, the feature is enabled and the minor engine upgrades will be applied to the selected RDS instance.The AutoMinorVersionUpgrade parameter should return true for all RDS database instances.
Databases.Modify button located at the top right side.Modify DB Instance: <instance identifier> page, In the Maintenance section, select Auto minor version upgrade and click the Yes radio button.Continue, and check Apply Immediately to apply the changes immediately, or select Apply during the next scheduled maintenance window to avoid any downtime.Modify DB Instance. The instance status should change from available to modifying and back to available. Once the feature is enabled, the Auto Minor Version Upgrade status should change to Yes.describe-db-instances command to list all RDS database instance names available in the selected AWS region:aws rds describe-db-instances --region <region-name> --query 'DBInstances[*].DBInstanceIdentifier'
The command output should return each database instance identifier.
Run the modify-db-instance command to modify the configuration of a selected RDS instance. This command will apply the changes immediately. Remove --apply-immediately to apply changes during the next scheduled maintenance window and avoid any downtime:
aws rds modify-db-instance --region <region-name> --db-instance-identifier <db-instance-identifier> --auto-minor-version-upgrade --apply-immediately
The command output should reveal the new configuration metadata for the RDS instance, including the AutoMinorVersionUpgrade parameter value.
Run the describe-db-instances command to check if the Auto Minor Version Upgrade feature has been successfully enabled:
aws rds describe-db-instances --region <region-name> --db-instance-identifier <db-instance-identifier> --query 'DBInstances[*].AutoMinorVersionUpgrade'
true, indicating that the feature is enabled, and that the minor engine upgrades will be applied to the selected RDS instance.By default, new Amazon RDS instances have the Auto Minor Version Upgrade option enabled, unless explicitly disabled at creation or modification.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 7.4 Perform Automated Application Patch Management | x | x | x |
| v7 | 3.5 Deploy Automated Software Patch Management Tools | x | x | x |
| Techniques / Sub-techniques | Tactics | Mitigations |
|---|---|---|
| M1051 |
Level 1 | Automated