resource "aws_db_instance" "mc-rds-prod-02" { #checkov:skip=CKV2_AWS_30: Ensure Postgres RDS as aws_db_instance has Query Logging enabled #checkov:skip=CKV_AWS_161: Ensure RDS database has IAM authentication enabled #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically #checkov:skip=CKV_AWS_118: Ensure that enhanced monitoring is enabled for Amazon RDS instances allocated_storage = 250 auto_minor_version_upgrade = false availability_zone = "eu-central-1b" backup_retention_period = 14 backup_window = "04:30-05:00" ca_cert_identifier = "rds-ca-rsa2048-g1" copy_tags_to_snapshot = true customer_owned_ip_enabled = false db_name = "mconversion" db_subnet_group_name = "mcsec-p1-rds-sng" delete_automated_backups = true deletion_protection = true enabled_cloudwatch_logs_exports = [ "postgresql", ] engine = "postgres" engine_version = "17.7" iam_database_authentication_enabled = false identifier = "mc-rds-prod-02" instance_class = "db.m6g.xlarge" iops = 3000 kms_key_id = "arn:aws:kms:eu-central-1:844930103112:key/54291a0c-e832-4db9-bbe1-98c9de25a983" license_model = "postgresql-license" maintenance_window = "sun:06:30-sun:07:00" max_allocated_storage = 350 monitoring_interval = 0 multi_az = true network_type = "IPV4" parameter_group_name = "mc-rds-prod-pg17" port = 5432 publicly_accessible = false skip_final_snapshot = true storage_encrypted = true storage_throughput = 125 storage_type = "gp3" apply_immediately = true allow_major_version_upgrade = true tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Env" = "prod" "Environment" = "Prod" "Name" = "mc-rds-prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" "map-dba" = "d-server-01tz6mps1jopod" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Env" = "prod" "Environment" = "Prod" "Name" = "mc-rds-prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" "map-dba" = "d-server-01tz6mps1jopod" } username = "master_rds" vpc_security_group_ids = [ "sg-0dc9b8795b6ddeedb", ] } resource "aws_db_instance" "mc-sec-p1-arvato-rds" { #checkov:skip=CKV_AWS_129: Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically allocated_storage = 50 auto_minor_version_upgrade = false availability_zone = "eu-central-1b" backup_retention_period = 7 backup_window = "01:22-01:52" ca_cert_identifier = "rds-ca-rsa2048-g1" character_set_name = "SQL_Latin1_General_CP1_CI_AS" copy_tags_to_snapshot = true customer_owned_ip_enabled = false db_subnet_group_name = "vantage-sn-group" delete_automated_backups = true deletion_protection = true domain = "d-996723597e" domain_iam_role_name = "rds-directoryservice-access-role" enabled_cloudwatch_logs_exports = [] engine = "sqlserver-se" engine_version = "13.00.6300.2.v1" iam_database_authentication_enabled = false identifier = "mc-sec-p1-arvato-rds" instance_class = "db.m5.xlarge" kms_key_id = "arn:aws:kms:eu-central-1:844930103112:key/a900280c-4b58-4823-a6f2-2f884306907e" license_model = "license-included" maintenance_window = "tue:04:10-tue:04:40" max_allocated_storage = 1000 monitoring_interval = 60 monitoring_role_arn = "arn:aws:iam::844930103112:role/rds-monitoring-role" multi_az = false network_type = "IPV4" option_group_name = "default:sqlserver-se-13-00" parameter_group_name = "vantage-parameter-group" performance_insights_enabled = true performance_insights_kms_key_id = "arn:aws:kms:eu-central-1:844930103112:key/a900280c-4b58-4823-a6f2-2f884306907e" performance_insights_retention_period = 7 port = 1433 publicly_accessible = false skip_final_snapshot = true storage_encrypted = true storage_type = "gp3" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" } username = "vantage" vpc_security_group_ids = [ "sg-0a1787b8f6ec7bd59", ] } resource "aws_db_instance" "mc-sec-prd-1" { #checkov:skip=CKV_AWS_129: Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically allocated_storage = 50 auto_minor_version_upgrade = false availability_zone = "eu-central-1b" backup_retention_period = 7 backup_window = "21:58-22:28" ca_cert_identifier = "rds-ca-rsa2048-g1" character_set_name = "SQL_Latin1_General_CP1_CI_AS" copy_tags_to_snapshot = true customer_owned_ip_enabled = false db_subnet_group_name = "vantage-sn-group" delete_automated_backups = true deletion_protection = true domain = "d-996723597e" domain_iam_role_name = "rds-directoryservice-access-role" enabled_cloudwatch_logs_exports = [] engine = "sqlserver-se" engine_version = "13.00.6300.2.v1" iam_database_authentication_enabled = false identifier = "mc-sec-prd-1" instance_class = "db.m5.xlarge" kms_key_id = "arn:aws:kms:eu-central-1:844930103112:key/a900280c-4b58-4823-a6f2-2f884306907e" license_model = "license-included" maintenance_window = "sun:00:38-sun:01:08" max_allocated_storage = 1000 monitoring_interval = 60 monitoring_role_arn = "arn:aws:iam::844930103112:role/rds-monitoring-role" multi_az = false network_type = "IPV4" option_group_name = "default:sqlserver-se-13-00" parameter_group_name = "vantage-parameter-group" performance_insights_enabled = true performance_insights_kms_key_id = "arn:aws:kms:eu-central-1:844930103112:key/a900280c-4b58-4823-a6f2-2f884306907e" performance_insights_retention_period = 7 port = 1433 publicly_accessible = false skip_final_snapshot = true storage_encrypted = true storage_type = "gp3" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Project-Code" = "SME-2000-0306C" "Project-Name" = "AOMA-Conversion" } username = "vantage" vpc_security_group_ids = [ "sg-0a1787b8f6ec7bd59", ] }