RDS database instance {AwsRdsDbInstance} is publicly accessible. When the RDS instance allows unrestricted access, everyone and everything on the Internet can establish a connection to your database and this can increase the opportunity for malicious activities such as brute force attacks, PostgreSQL injections, or DoS/DDoS attacks.
Recommended Mitigation
We recommend to disable the database Publicly Accessible flag and to update the VPC security group associated with the instance to restrict public access.
Data at risk
