Security posture waste check
RDS Publicly Accessible
rds_publicly_accessible
What it finds
RDS Publicly Accessible: one of the Security posture checks in the security & compliance group. Checks in this group look for: configuration gaps on resources you pay for: missing encryption, missing deletion protection, public exposure, uncovered backups.
Why it costs money
These are posture findings first. Some also carry a cost, such as a resource nobody backs up or protects properly, and the report labels which is which.
How it is detected
RDS instance with public accessibility enabled
Detection confidence: HIGH. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.
AWS's own tools
AWS flags this too, under "RDS.2 RDS DB Instances should prohibit public access, as determined by the PubliclyAccessible configuration".
Checked against the AWS documentation.
Run it yourself
Nothing leaves your machine. The local scan has no telemetry.