Skip to content

Files

Latest commit

 

History

History
31 lines (22 loc) · 895 Bytes

aws-rds-enable-performance-insights.md

File metadata and controls

31 lines (22 loc) · 895 Bytes

Pattern: Disabled Performance Insights for AWS RDS

Issue: -

Description

When enabling Performance Insights on an RDS cluster or RDS DB Instance, and encryption key should be provided. The encryption key specified in performance_insights_kms_key_id references a KMS ARN.

Resolution: Enable Performance Insights for RDS clusters and instances.

Examples

Example of incorrect code:

resource "aws_rds_cluster_instance" "bad_example" {
  name                 = "bar"
  performance_insights_enabled = true
  performance_insights_kms_key_id = ""
}

Example of correct code:

resource "aws_rds_cluster_instance" "good_example" {
  name                 = "bar"
  performance_insights_enabled = true
  performance_insights_kms_key_id = "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
}