Notes
-
For some reason, similar policies mention only
mysqlandpostgresengines in the policyauditandremediationsections. However, AWS documentation tells thatAutoMinorVersionUpgradeattribute is supported onALLDB engines: docs -
We've modified the
sshcommands to include all engines (see remediation.md). -
Our policy document also accepts all engines (doesn't filter any).