cis-aws-database-6-5

name	cis-aws-database-6.5
description	Ensure Security Configurations are Reviewed Regularly
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","memorydb","redis","security-review","iam","configuration"]
cis_id	6.5
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-6.1","cis-aws-database-6.2","cis-aws-database-6.3","cis-aws-database-6.4","cis-aws-database-6.6"]
prerequisites	[]
severity_boost	{}

6.5 Ensure Security Configurations are Reviewed Regularly (Manual)

Description

This helps by removing or updating any IAM roles, security networks, encryption settings, audit logging, and authentication. By updating or removing a few things from these lists it helps tighten security and ensures that the users do not have excessive permissions.

Rationale

Regular review of security configurations ensures that the MemoryDB cluster maintains a strong security posture and adapts to changing requirements.

Impact

By regularly checking these settings in the database the user is preventing the database from a cyber threat.

Audit Procedure

Using AWS Console

1. Sign into the AWS Management Console

   • Sign into the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the Amazon MemoryDB Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/memorydb/.

3. Select the Cluster

   • Choose the Amazon MemoryDB cluster for which you want to update and review the security configuration.
   • Click on the cluster name to access its details page.

4. Review IAM Roles and Permissions

   • In the cluster details page, navigate to the Security or Access Control section.
   • Review the IAM roles and permissions associated with the cluster.
   • Ensure that the IAM roles have appropriate permissions and follow the principle of least privilege.
   • Review the IAM policies and make any necessary updates to align with your security requirements.

5. Review Network Security

   • In the cluster details page, navigate to the Security or Network & Security section.
   • Review the Virtual Private Cloud (VPC), subnets, security groups, and network ACLs associated with the cluster.
   • Ensure that the VPC and subnet configurations align with your security requirements.
   • Review the security group rules and network ACL rules to ensure they restrict access to necessary ports, IP ranges, and protocols.
   • Make any necessary updates to tighten the network security settings.

6. Review Encryption Settings

   • In the cluster details page, navigate to the or section.