{
  "Provider": "aws",
  "CheckID": "rds_snapshots_public_access",
  "CheckTitle": "Check if RDS Snapshots and Cluster Snapshots are public.",
  "CheckType": [],
  "ServiceName": "rds",
  "SubServiceName": "",
  "ResourceIdTemplate": "arn:aws:rds:region:account-id:snapshot",
  "Severity": "critical",
  "ResourceType": "AwsRdsDbSnapshot",
  "Description": "Check if RDS Snapshots and Cluster Snapshots are public.",
  "Risk": "Publicly accessible services could expose sensitive data to bad actors. t is recommended that your RDS snapshots should not be public in order to prevent potential leak or misuse of sensitive data or any other kind of security threat. If your RDS snapshot is public, then the data which is backed up in that snapshot is accessible to all other AWS accounts.",
  "RelatedUrl": "https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshots-public-prohibited.html",
  "Remediation": {
    "Code": {
      "CLI": "aws rds modify-db-snapshot-attribute --db-snapshot-identifier <snapshot_id> --attribute-name restore --values-to-remove all",
      "NativeIaC": "",
      "Other": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/RDS/public-snapshots.html",
      "Terraform": ""
    },
    "Recommendation": {
      "Text": "Use AWS Config to identify any snapshot that is public.",
      "Url": "https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshots-public-prohibited.html"
    }
  },
  "Categories": [
    "internet-exposed"
  ],
  "Tags": {
    "Tag1Key": "value",
    "Tag2Key": "value"
  },
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
