Amazon_RDS_14

Ensure there are no Idle RDS Instance

Description

Identify any Amazon RDS database instances that appear to be idle and delete them to help lower the cost of your monthly AWS bill. By default, an RDS instance is considered ‘idle’ when meets both of the following criteria :

  • The average number of database connections has been less than 1 for the last 7 days.
  • The total number of database ReadIOPS and WriteIOPS recorded per day for the last 7 days has been less than 20 on average.

The AWS CloudWatch metrics used to detect idle RDS instances are:

  • DatabaseConnections – the number of RDS database connections in use (Units: Count).
  • ReadIOPS and WriteIOPS – the average number of disk I/O (Input/Output) operations per second (Units: Count/Second).

Remediation

1. Sign in to the AWS Management Console.

2. Navigate to RDS dashboard.

3. In the left navigation panel, under RDS Dashboard section, choose Instances.

4. Select the idle RDS database instance that you want to terminate.

5. Click the Instance Actions dropdown button from the dashboard top menu and select Delete.

6. On the Delete DB Instance confirmation page, select Yes from the Create final Snapshot dropdown menu and enter a unique name for your last database backup (snapshot) in the Final snapshot name box.

7. Click the Delete button to terminate the instance.

Service

RDS

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!