RDS engine version has available minor version upgrades

Severity: Medium
Service: RDS
Check ID: RDS_OUTDATED_ENGINE

What this check finds

This RDS instance is running an engine version that has newer minor releases available. Minor version upgrades include security patches and bug fixes.

Passing looks like: RDS engine version current.

How to fix it

Enable auto minor version upgrade or manually upgrade.

AWS CLI

aws rds modify-db-instance --db-instance-identifier DB_ID --auto-minor-version-upgrade --apply-immediately

Names in capitals are placeholders for your own resource. Review a command before you run it.

AWS console

RDS → Modify → Engine version → select latest.

Compliance controls it is evidence for

A failing result counts against these controls in KloudLytics; a passing one is evidence towards them. How compliance mapping works

Compliance controls mapped to RDS engine version has available minor version upgrades
Framework	Controls
PCI-DSS v4.0.1	6.3 Security vulnerabilities are identified and addressed
NIST SP 800-53 Rev5 (Moderate)	SI-2 Flaw Remediation
NIST Cybersecurity Framework 2.0	ID.RA-01 Risk Assessment — Vulnerabilities are identified and recorded
ISO/IEC 27001:2022 Annex A	A.8.8 Management of technical vulnerabilities

Checked on every scan

KloudLytics runs this check each time it scans a connected AWS account, through a read-only role, and lists every affected resource with its region. On Pro and Business a fix is written for the specific resource rather than the general case above. The exact access it needs

More RDS checks

All RDS checks