logo

Database

Aws Instance Not In Subnet Group

Description

Detects AWS RDS database instances that are not associated with a DB subnet group. Running an RDS instance without a subnet group prevents proper network isolation and security controls, potentially exposing the database to unauthorized access.

Weakness:

109 - Unrestricted access between network segments - RDS

Category: Functionality Abuse

Detection Strategy

    Scans all RDS database instances in the AWS account

    Checks if each RDS instance has a DBSubnetGroup configuration

    Reports a vulnerability if an RDS instance is found with no subnet group assigned

    Captures the database instance ARN in the vulnerability report for remediation