Devolutions.CIEM

0.3.28

Checks/Aws/Test-RdsInstanceTransportEncrypted.ps1

                                function Test-RdsInstanceTransportEncrypted {

    <#

    .SYNOPSIS

        RDS instance or cluster enforces SSL/TLS encryption for client connections

    .DESCRIPTION

        **RDS DB instances** and **DB clusters** enforce **SSL/TLS** for client connections via parameter groups. The check looks for `rds.force_ssl=1` (PostgreSQL, SQL Server) or `require_secure_transport` enabled (MySQL-family) and identifies databases where encryption enforcement isn't active.

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        [CIEMCheck]$Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: rds_instance_transport_encrypted

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check rds_instance_transport_encrypted for reference.', 'N/A', 'rds Resources')

}