Mondoo Docs

Amazon RDS database instance

aws.rds.dbinstance MQL resource for querying AWS infrastructure with cnquery and cnspec.

AWS

Amazon RDS database instance

Use MQL in cnspec shell or policy:

aws.rds.dbinstance
Min version: 5.15.0Defaults: id region engine engineVersion

Relationships

Mini Map
AWS
8 resources · 17 relationshipsClick to select, expand fields to see properties.

Fields (44)

FieldTypeDescription
activityStreamModerequired
stringMode of the database activity stream
activityStreamStatusrequired
stringStatus of the database activity stream
arnrequired
stringARN for the database instance
autoMinorVersionUpgraderequired
intWhether minor version patches are applied automatically
availabilityZonerequired
stringAvailability zone where the instance exists
backupRetentionPeriodrequired
intNumber of days automated snapshots are retained
backupSettings
[]aws.rds.backupsettingBackup setting for the database instance
certificateAuthorityrequired
stringID of the Certificate Authority
certificateExpiresAtrequired
timeExpiration date for the instance certificate
createdAtrequired
timeDate and time the RDS instance was created
createdTimerequired
timeDeprecated (use `createdAt` instead)
customIamInstanceProfilerequired
stringAssigned IAM instance profile
dbInstanceClassrequired
stringName of the compute and memory capacity class of the database instance
dbInstanceIdentifierrequired
stringUser-supplied unique key that identifies a database instance
deletionProtectionrequired
intWhether deletion protection is enabled
enabledCloudwatchLogsExportsrequired
[]stringList of log types the instance is configured to export to CloudWatch logs
endpointrequired
stringConnection endpoint for the database instance
enginerequired
stringName of the database engine for this database instance
engineLifecycleSupportrequired
stringLife cycle type for the database engine. By default, this value is set to `open-source-rds-extended-support`, which enrolls your DB engine into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to `open-source-rds-extended-support-disabled`. In this case, creating the DB engine will fail if the DB major version is past its end of standard support date.
engineVersionrequired
stringVersion of the database engine for this database instance
enhancedMonitoringResourceArnrequired
stringARN of the CloudWatch log stream that receives the enhanced monitoring metrics data
iamDatabaseAuthenticationrequired
intWhether IAM database authentication is enabled
idrequired
stringIdentifier for the database instance
latestRestorableTimerequired
timeLatest time to which a database can be restored with point-in-time restore
masterUsernamerequired
stringMaster username for the database instance
monitoringIntervalrequired
intInterval, in seconds, between points when Enhanced Monitoring metrics are collected
multiAZrequired
intWhether the instance is a Multi-AZ deployment
namerequired
stringName of the database instance
networkTyperequired
stringNetwork type of the DB instance
pendingMaintenanceActions
[]aws.rds.pendingMaintenanceActionList of pending maintenance actions for the database instance
portrequired
intPort that the database instance listens on. If the database instance is part of a DB cluster, this can be a different port than the DB cluster port.
preferredBackupWindowrequired
stringPreferred backup window for the database cluster
preferredMaintenanceWindowrequired
stringPreferred maintenance window for the database cluster
publiclyAccessiblerequired
intWhether the instance is publicly accessible. Note: This will only return a value for non-Aurora Multi-AZ DB clusters
regionrequired
stringRegion where the instance exists
securityGroups
[]aws.ec2.securitygroupList of VPC security group elements that the database instance belongs to
snapshots
[]aws.rds.snapshotList of snapshots for the database instance
statusrequired
stringCurrent state of this database
storageAllocatedrequired
intAmount of storage, in GiB, provisioned on the instance
storageEncryptedrequired
intWhether the instance is encrypted
storageIopsrequired
intStorage IOPS provisioned on the instance
storageTyperequired
stringType of storage provisioned on the instance
subnets
[]aws.vpc.subnetSubnet for the RDS instance
tagsrequired
map[string]stringTags for the database instance