Description

Detects Amazon RDS database snapshots that are configured to be publicly accessible. Public RDS snapshots pose a security risk as they could expose sensitive database contents to unauthorized users outside your AWS account.

Detection Strategy

• Scans all RDS snapshots in the specified AWS region

• Examines the snapshot attributes for each RDS snapshot

• Reports a vulnerability if any snapshot has 'all' in its AttributeValues, indicating public accessibility

• Each vulnerability includes the specific snapshot's ARN and the attribute configuration that makes it public