cis-aws-database-3-3

name	cis-aws-database-3.3
description	Ensure to Create a Virtual Private Cloud (VPC)
category	cis-database
version	2.0.0
author	cyberstrike-official
tags	["cis","aws","database","rds","vpc","network-security","segmentation"]
cis_id	3.3
cis_benchmark	CIS AWS Database Services Benchmark v2.0.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-database-3.4","cis-aws-database-3.12"]
prerequisites	[]
severity_boost	{}

3.3 Ensure to Create a Virtual Private Cloud (VPC) (Manual)

Description

Setting up a Virtual Private Cloud (VPC) protects the private network that has been established from any external networks from interfering. It allows internal networks to communicate with one another with the network that has been established.

Rationale

A VPC provides network isolation and segmentation for RDS instances, ensuring that database traffic is contained within a private network boundary.

Impact

Builds a strong connection between internal networks, and the internet, and it secures your data from getting into the hand of an unauthorized party.

Audit Procedure

Using AWS Console

1. Sign in to the AWS Management Console

   • Sign in to the AWS Management Console at https://console.aws.amazon.com/ with your AWS account credentials.

2. Open the Amazon VPC Console

   • Navigate to the service using the Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/vpc/.

3. Create a VPC

   • In the Amazon VPC console, click Your VPCs in the left-side menu.
   • Click on Create VPC to begin creating a new VPC.
   • Provide a name and the desired IPv4 CIDR block for your VPC.
   • Configure additional settings, such as IPv6 CIDR block, tenancy, and DNS resolution.
   • Click Create to create the VPC.

4. Create Subnets

   • In the Amazon VPC console, click Subnets in the left-side menu.
   • Click on Create subnet to create a subnet within the VPC.
   • Select the VPC you created in the previous step.
   • Provide a name, choose an availability zone, and specify the IPv4 CIDR block for the subnet.
   • Configure additional settings, such as IPv6 CIDR block and availability zone.
   • Click Create to create the subnet.

5. Configure Route Tables

   • In the Amazon VPC console, click on Route Tables in the left-side menu.
   • Click on Create route table to create a new route table.
   • Provide a name for the route table and select the VPC you created earlier.
   • Click Create to create the route table.