Skip to main content

Triage AWS RDS DB Instances should automatically version upgrade AUTO_MINOR_VERSION_UPGRADE_NOT_ENABLED

  1. Configure AWS RDS DB Instances should automatically version upgrade
  2. Use Case for AWS RDS DB Instances should automatically version upgrade
  3. Triage Guides by Violation Type
    1. Triage AWS RDS DB Instances should automatically version upgrade AUTO_MINOR_VERSION_UPGRADE_NOT_ENABLED

Why should I care about fixing this issue?​

To get started on understanding RDS Auto Minor Version Upgrade, read our use-case page.

What is the data source for this policy?​

This policy relies on a call to rds:DescribeDBInstances. If the response of the property AutoMinorVersionUpgrade is not true, then a violation is opened by the policy.

Does this policy scan on a schedule? If so, when?​

No, it's triggered when changes to matching resources are detected.

How do I enable auto minor version upgrades using AWS Console?​

See the console instructions on Turning on automatic minor version upgrades.

How do I enable auto minor version upgrades using CloudFormation?​

AWS::RDS::DBInstance

Note that the field is not required and the default value is true.

 Type: AWS::RDS::DBInstance
 Properties: 
-   AutoMinorVersionUpgrade: false
+   AutoMinorVersionUpgrade: true

How do I enable auto minor version upgrades using Terraform?​

aws_db_instance.

Note that the field is not required, may not be present, and the default value is true (auto minor version upgrades enabled).

 resource "aws_db_instance" "example" {
-  auto_minor_version_upgrade = false
+  auto_minor_version_upgrade = true
 }

How do I enable auto-backups using AWS CLI?​

See the CLI instructions on Turning on automatic minor version upgrades.

When is it appropriate to mark this violation as "by design"?​

To get started on understanding RDS Auto Minor Version Upgrade, read our use-case page.