RDS instance SSL encryption is disabled

Data protection

RDS instance SSL encryption is disabled

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AliCloud CIS

Description

Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. SSL (Secure Sockets Layer) is a cryptographic protocol for secured and encrypted connections over the network. It was found that the instance '{AliCloudRdsDbInstance}' doesn't have SSL encryption enabled. Allowing connections without SSL encryption can expose sensitive data from your SQL database.

Recommended Mitigation

For security measures it is recommended to enable SSL encryption for all incoming connections to your SQL database instances. To enable SSL encryption follow the instruction at: https://www.alibabacloud.com/help/doc-detail/32474.htm

RDS instance SSL encryption is disabled

Description

Need help?