cis-aws-database-5-10

name	cis-aws-database-5.10
description	Ensure Security Configurations are Reviewed Regularly
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","elasticache","redis","security-review","keyspaces","compliance"]
cis_id	5.10
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-5.7","cis-aws-database-5.8"]
prerequisites	[]
severity_boost	{}

5.10 Ensure Security Configurations are Reviewed Regularly

Description

Regularly updating and reviewing the security configuration of your Amazon Keyspaces environment helps ensure that your database is protected against potential vulnerabilities and aligned with your security requirements.

Rationale

N/A

Impact

If you are not updating these regularly, your database would most likely become susceptible to a vulnerable attack. Not updating your IAM permission, network, and encryption setting, and controlling audit logging, would lead to the attacker getting into the system which would result in data loss.

Audit Procedure

Using AWS Console

1. Sign in to the AWS Management Console

   • Sign in to the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the Amazon Keyspaces Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/keyspaces/.

3. Select the Keyspace

   • Choose the Keyspace (database) for which you want to update and review the security configuration.
   • Click on the Keyspace name to access its details page.

4. Review IAM Roles and Permissions

   • In the Keyspace details page, click on the Configuration tab.
   • Under the Authentication and access control section, review the IAM roles and permissions associated with the Keyspace.
   • Ensure that the IAM roles have appropriate permissions and follow the principle of least privilege.
   • Review the IAM policies and make any necessary updates to align with your security requirements.

5. Review Network Security

   • In the Keyspace details page, click on the Configuration tab.
   • Under the Network & Security section, review the VPC, subnets, security groups, and network ACLs associated with the Keyspace.
   • Ensure that the VPC and subnet configurations align with your security requirements.
   • Review the security group rules and network ACL rules to ensure they restrict access to necessary ports, IP ranges, and protocols.
   • Make any necessary updates to tighten the network security settings.

6. Review Encryption Settings