cis-aws-database-5-7

name	cis-aws-database-5.7
description	Ensure Security Configurations are Reviewed Regularly
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","elasticache","redis","security-review","configuration","compliance"]
cis_id	5.7
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-5.1","cis-aws-database-5.3","cis-aws-database-5.5"]
prerequisites	[]
severity_boost	{}

5.7 Ensure Security Configurations are Reviewed Regularly

Description

Regularly updating and reviewing the security configuration of your Amazon ElastiCache clusters helps ensure that your clusters are protected against potential vulnerabilities and aligned with your security requirements.

Rationale

This ensures that the clusters are being regularly updated and protected from any potential vulnerabilities as well as meeting the security requirements.

Impact

Updating the system and being updated with security configurations keeps everything secure and prevents it from an attack.

Audit Procedure

Using AWS Console

1. Sign in to the AWS Management Console

   • Sign in to the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the ElastiCache Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/elasticache/.

3. Select the ElastiCache Cluster

   • Choose the ElastiCache cluster you want to update and review the security configuration. Click on the cluster name to access its details page.

4. Review IAM Policies

   • Navigate to the Configuration tab on the cluster details page.
   • Click on the IAM Access tab.
   • Review the IAM policies associated with the ElastiCache cluster and its resources.
   • Ensure that the IAM policies provide the least privileged access, granting only the necessary permissions to users and roles.
   • Update the IAM policies as required based on changes in access requirements or security best practices.

5. Review Security Groups

   • Navigate to the Configuration tab on the cluster details page.
   • Click on the Security Groups tab.
   • Review the security groups associated with the ElastiCache cluster.
   • Ensure that the inbound and outbound rules of the security groups are configured correctly and restrict access to necessary ports and IP ranges.
   • Update the security group rules as needed to align with your security requirements.

6. Review Encryption Settings

   • Navigate to the Configuration tab on the cluster details page.