RDS instances should be configured to copy tags to snapshots

rds
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

This control verifies RDS DB instances are set to automatically copy all tags to snapshots upon creation. Proper identification and inventory management of IT assets are fundamental for robust governance and security. Full visibility into your RDS DB instances allows you to evaluate their security status and address vulnerabilities effectively. Snapshots should carry the same tags as their parent database instances to maintain consistency. Enabling tag inheritance ensures that snapshots adopt the tags of their parent instances, which aids in asset management and security tracking.

Remediation

To configure tags to automatically copy to snapshots for an RDS DB instance, refer to the Modifying an Amazon RDS DB instance in the Amazon RDS User Guide.