DMS endpoints should require SSL/TLS
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
This control verifies if an AWS DMS endpoint is configured to use an SSL connection. The ssl_mode of the endpoint must set to either require, verify-ca or verify-full.
SSL/TLS connections enhance security by encrypting data exchanged between DMS replication instances and your database. Additionally, using certificates adds another layer of protection by ensuring the connection is established with the intended database through server certificate validation. The server certificate is automatically installed on all provisioned database instances. Enabling SSL on your DMS endpoints ensures data confidentiality during migration.
This control skips endpoints that encrypt connections by default. These include S3, DynamoDB, Kinesis, Neptune, and Elasticsearch (see note about the SSL mode option), which do not have an SSL mode setting available.
For guidance on configuring SSL for DMS endpoints, refer to the Using SSL with AWS Database Migration Service section of the AWS Database Migration Service User Guide.
