RDS Instance TDE Status Disabled
- Query id: 44d434ca-a9bf-4203-8828-4c81a8d5a598
- Query name: RDS Instance TDE Status Disabled
- Platform: Terraform
- Severity: High
- Category: Encryption
- URL: Github
Description¶
tde_status parameter should be Enabled for supported RDS instances
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "alicloud_db_instance" "default" {
engine = "MySQL"
engine_version = "5.6"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
tde_status = "Disabled"
parameters = [{
name = "innodb_large_prefix"
value = "ON"
},{
name = "connect_timeout"
value = "50"
}]
}
Postitive test num. 2 - tf file
resource "alicloud_db_instance" "default" {
engine = "MySQL"
engine_version = "8"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
parameters = [{
name = "innodb_large_prefix"
value = "ON"
},{
name = "connect_timeout"
value = "50"
}]
}
Postitive test num. 3 - tf file
resource "alicloud_db_instance" "default" {
engine = "SQLServer"
engine_version = "2019_std_ha"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
tde_status = "Disabled"
parameters = []
}
Postitive test num. 4 - tf file
Code samples without security vulnerabilities¶
Negative test num. 1 - tf file
resource "alicloud_db_instance" "default" {
engine = "MySQL"
engine_version = "5.6"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
tde_status = "Enabled"
parameters = [{
name = "innodb_large_prefix"
value = "ON"
},{
name = "connect_timeout"
value = "50"
}]
}
Negative test num. 2 - tf file
resource "alicloud_db_instance" "default" {
engine = "MySQL"
engine_version = "8"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
tde_status = "Enabled"
parameters = [{
name = "innodb_large_prefix"
value = "ON"
},{
name = "connect_timeout"
value = "50"
}]
}
Negative test num. 3 - tf file
resource "alicloud_db_instance" "default" {
engine = "SQLServer"
engine_version = "2019_std_ha"
db_instance_class = "rds.mysql.t1.small"
db_instance_storage = "10"
tde_status = "Enabled"
parameters = []
}