logo

Database

Aws Iam Authentication Disabled

Description

Detects Amazon RDS database instances that don't have IAM database authentication enabled. IAM database authentication provides an additional layer of security by allowing users to authenticate to database instances using IAM credentials instead of passwords, reducing the risk of password exposure and enabling centralized access management.

Weakness:

165 - Insecure service configuration - AWS

Category: Functionality Abuse

Detection Strategy

    Scans all RDS database instances in the specified AWS region

    Reports a vulnerability when an RDS instance has IAMDatabaseAuthenticationEnabled set to false

    Each vulnerability includes the specific RDS instance ARN and its current IAM authentication setting

Severity v4.0

1.3

Low

Method ID

CSPM-EDIAA

Technique

CSPM

Target

AWS

Technology

RDS

CWE ID(s)

CWE-306