🧠 AWS RDS Cluster has a common master username - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 AWS RDS Cluster
• 🔌 AWS RDS Cluster - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-01-31T12:02:11.814626549Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__status__c') != 'available'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__engine__c') == 'neptune'	✔️ null
🟢	test4	✔️ 399	✔️ extract('CA10__engine__c') == 'docdb'	✔️ null
🟢	test5	✔️ 499	✔️ setOfText(['root', 'admin', 'administrator', 'adminuser', 'superuser', 'sa', 'sysadmin', 'dbadmin', 'user', 'dbuser', 'sys', 'system', 'awsuser', 'mysql', 'oracle', 'postgres']).contains(extract('CA10__masterUsername__c'))	✔️ null
🟢	test6	✔️ 500	✔️ otherwise	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/aws/rds/cluster-master-username/policy.yaml	9547D0CC395D0255524092767D9AEAD9
Open	/ce/ca/aws/rds/cluster-master-username/prod.logic.yaml	1FC2612D1FF1CD66C016AA08571438FE
Open	/ce/ca/aws/rds/cluster-master-username/test-data.json	2AC4DDA01C762BDC24144D0AA8EEB408
Open	/types/CA10__CaAwsDbCluster__c/object.extracts.yaml	D2C2C5F972AEC114F6BD57EB74FA57CB

Available Commands

repo-manager policies generate FULL /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/cluster-master-username/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAwsDbCluster__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaAwsDbCluster__c/object.extracts.yaml
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "The Cluster is not available."
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10__status__c"
        right:
          TEXT: "available"
  - status: "INAPPLICABLE"
    currentStateMessage: "This policy doesn't apply to Neptune."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__engine__c"
        right:
          TEXT: "neptune"
  - status: "INAPPLICABLE"
    currentStateMessage: "This policy doesn't apply to DocumentDB."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__engine__c"
        right:
          TEXT: "docdb"          
  - status: "INCOMPLIANT"
    currentStateMessage: "The RDS Cluster has default or insecure admin username."
    remediationMessage: "Change the instance admin username."
    check:
      CONTAINS:
        arg:
          SET:
            itemType: "TEXT"
            items:
              - "root"
              - "admin"
              - "administrator"
              - "adminuser"
              - "superuser"
              - "sa"
              - "sysadmin"
              - "dbadmin"
              - "user"
              - "dbuser"
              - "sys"
              - "system"
              - "awsuser"
              - "mysql"
              - "oracle"
              - "postgres"
        search:
          EXTRACT: "CA10__masterUsername__c"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "RDS Cluster has custom admin username."