LOW
Source
Trivy
ID
AVD-AWS-0133

Enable Performance Insights to detect potential problems

Enabling Performance insights allows for greater depth in monitoring data.

For example, information about active sessions could help diagose a compromise or assist in the investigation

Impact

Without adequate monitoring, performance related issues may go unreported and potentially lead to compromise.

Follow the appropriate remediation steps below to resolve the issue.

Enable performance insights

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
AWSTemplateFormatVersion: 2010-09-09
Description: Good example
Resources:
  Queue:
    Type: AWS::RDS::DBInstance
    Properties:
      EnablePerformanceInsights: true
      PerformanceInsightsKMSKeyId: "something"


Enable performance insights

1
2
3
4
5
6
resource "aws_rds_cluster_instance" "good_example" {
	name = "bar"
	performance_insights_enabled = true
	performance_insights_kms_key_id = "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
}