logo

Database

Aws Public Cluster

Description

Detects AWS RDS database clusters that are configured to be publicly accessible. Publicly accessible RDS clusters can potentially be reached from the internet, which increases the attack surface and could expose sensitive data if not properly secured with additional controls.

Detection Strategy

    Identifies a vulnerability when an RDS DB cluster has the 'PubliclyAccessible' flag set to true

    Examines each RDS cluster's configuration in the AWS account

    Reports the specific cluster ARN and its public accessibility status when a public cluster is found