Scoutsuite: "Backup disabled" shouldn't be flagged for read-only replicas for RDS

Created on 4 Jul 2018  路  4Comments  路  Source: nccgroup/ScoutSuite

If a read replica's backup period is modified, the following message can appear: "DB Backups not supported on a read replica for engine postgres"

bug component-findings component-provider-aws good first issue

All 4 comments

Could you provide more details for this issue? Not sure what this refers to.

@j4v if i have RDS read-only replicas, rds-instance-backup-disabled shouldn't be flagged for them, since enabling backup on read-only replicas is disabled by RDS (if it's attempted, the following message appears in RDS: "DB Backups not supported on a read replica for engine postgres")

Gotcha, thank you for the details. Will put this in the pipeline.

This is still happening as of today.

Repro steps:

  1. Create a MySql instance
  2. In the RDS console, head to _Databases_, select your database, click _Actions_ and _Create read replica_
  3. Perform a scan
  4. _Backup disabled_ should be flagged for your replica

image

Was this page helpful?
0 / 5 - 0 ratings

Related issues

thommor picture thommor  路  4Comments

regevbr picture regevbr  路  7Comments

x4v13r64 picture x4v13r64  路  8Comments

Aboisier picture Aboisier  路  8Comments

sidewinder31 picture sidewinder31  路  6Comments