Description

Detects AWS RDS database snapshots that are configured with public accessibility. Public snapshots can expose sensitive database contents to unauthorized users since they can be accessed by anyone with an AWS account, potentially leading to data breaches.

Detection Strategy

• Scans all RDS database snapshots in the specified AWS region

• Examines the snapshot's attribute settings to check if it has been shared with 'all' (public access)

• Reports a vulnerability if any snapshot's AttributeValues contains 'all' in its sharing settings