Low

Ensure RDS MySQL and PostgreSQL database instances have Performance Insights feature enabled

Other
AWS Well-Architected Framework
HITRUST
NIST 800-53
Description

Enabling the Performance Insights feature on your AWS RDS MySQL and PostgreSQL database instances can provide you with an enhanced overview of your databases' performance and facilitate the identification of potential performance issues. Performance Insights is a performance monitoring tool for evaluating the load on your MySQL/PostgreSQL databases, enabling you to determine when and where action is necessary. It offers an easy-to-understand dashboard that visualizes database load in real-time, allowing you to detect performance bottlenecks. With Performance Insights, you can quickly identify the type of bottleneck, such as high CPU consumption, lock waits, or I/O latency, and determine which SQL queries are causing the bottleneck. Performance Insights is currently available for the following database engines: Amazon Aurora (MySQL and PostgreSQL-compatible editions), AWS RDS MySQL, and AWS RDS PostgreSQL.The Performance Insights feature of AWS Relational Database Service (RDS) provides instant visibility into the nature of workloads on your Amazon RDS databases, helping you to pinpoint the cause of any performance issues you may encounter.

Remediation

To ensure that your AWS RDS MySQL and PostgreSQL database instances have the Performance Insights feature enabled, you can take the following steps:

  1. Log in to the AWS Management Console and navigate to the Amazon RDS dashboard.
  2. Choose the RDS instance for which you want to enable Performance Insights.
  3. Click on "Modify" button to modify the settings of the RDS instance.
  4. Scroll down to the "Performance Insights" section and enable the feature.
  5. Specify the retention period for performance data that you want to retain in the "Data retention" field.
  6. Click on "Save changes" to apply the changes.

Note: Enabling Performance Insights may result in additional charges for data storage and API usage. You may want to review the pricing details before enabling this feature.

Enforced Resources
RDS
Note: Remediation steps provided by Lightlytics are meant to be suggestions and guidelines only. It is crucial to thoroughly verify and test any remediation steps before applying them to production environments. Each organization's infrastructure and security needs may differ, and blindly applying suggested remediation steps without proper testing could potentially cause unforeseen issues or vulnerabilities. Therefore, it is strongly recommended that you validate and customize any remediation steps to meet your organization's specific requirements and ensure that they align with your security policies and best practices.