🧠 AWS RDS Instance uses default endpoint port - prod.logic.yaml 🟢
- Contextual name: 🧠 prod.logic.yaml 🟢
- ID:
/ce/ca/aws/rds/instance-default-port/prod.logic.yaml - Located in: 📝 AWS RDS Instance uses default endpoint port 🟢
Flags
Input Type
| Type | API Name | Extracts | Extract Files | Logic Files | |
|---|---|---|---|---|---|
| 🔒 | 📕 AWS RDS Instance | CA10__CaAwsDbInstance__c | 6 | 1 | 5 |
Uses
Test Results 🟢
Generated at: 2025-04-24T23:45:03.067592569Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| 🟢 | test1 | ✔️ 99 | ✔️ isDisappeared(CA10__disappearanceTime__c) | ✔️ null |
| 🟢 | test2 | ✔️ 199 | ✔️ extract('CA10__endpointPort__c') == '3306' && (extract('CA10__engine__c') == 'aurora' || extract('CA10__engine__c') == 'aurora-mysql' || extract('CA10__engine__c') == 'mariadb' || extract('CA10__engine__c') == 'mysql') | ✔️ null |
| 🟢 | test3 | ✔️ 299 | ✔️ extract('CA10__endpointPort__c') == '1521' && extract('CA10__engine__c').startsWith('oracle-') | ✔️ null |
| 🟢 | test4 | ✔️ 399 | ✔️ extract('CA10__endpointPort__c') == '5432' && (extract('CA10__engine__c') == 'aurora-postgresql' || extract('CA10__engine__c') == 'postgres') | ✔️ null |
| 🟢 | test5 | ✔️ 499 | ✔️ extract('CA10__endpointPort__c') == '1433' && extract('CA10__engine__c').startsWith('sqlserver-') | ✔️ null |
| 🟢 | test6 | ✔️ 599 | ✔️ extract('CA10__endpointPort__c') == '27017' && extract('CA10__engine__c') == 'docdb' | ✔️ null |
| 🟢 | test7 | ✔️ 699 | ✔️ extract('CA10__engine__c') != 'aurora' && extract('CA10__engine__c') != 'aurora-mysql' && extract('CA10__engine__c') != 'mariadb' && extract('CA10__engine__c') != 'mysql' && extract('CA10__engine__c') != 'docdb' && extract('CA10__engine__c') != 'aurora-postgresql' && extract('CA10__engine__c') != 'postgres' && not(extract('CA10__engine__c').startsWith('oracle-')) && not(extract('CA10__engine__c').startsWith('sqlserver-')) | ✔️ null |
| 🟢 | test8 | ✔️ 700 | ✔️ otherwise | ✔️ null |
Generation
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/rds/instance-default-port/policy.yaml | 420BC7497C968AB38CA127F96FF36741 |
| Open | /ce/ca/aws/rds/instance-default-port/prod.logic.yaml | FFA2EB8C25A2ACFE53F246BBDE8E221E |
| Open | /ce/ca/aws/rds/instance-default-port/test-data.json | E2B0EE8EB649E7A1F693CBBFC3A8A202 |
| Open | /types/CA10__CaAwsDbInstance__c/object.extracts.yaml | FF9B20D94B2A03C8B9A5C755DC5EF3A9 |
Generate FULL script
java -jar repo-manager.jar policies generate FULL /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Generate DEBUG script
java -jar repo-manager.jar policies generate DEBUG /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Generate CAPTURE_TEST_DATA script
java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Generate TESTS script
java -jar repo-manager.jar policies generate TESTS /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Execute tests
java -jar repo-manager.jar policies test /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Content
---
inputType: "CA10__CaAwsDbInstance__c"
importExtracts:
- file: "/types/CA10__CaAwsDbInstance__c/object.extracts.yaml"
testData:
- file: "test-data.json"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "Default port 3306 used for MySQL-compatible database."
remediationMessage: "Change the port from 3306 to any other port number."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "3306"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-mysql"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mariadb"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mysql"
- status: INCOMPLIANT
currentStateMessage: "Default port 1521 used for Oracle database."
remediationMessage: "Change the port from 1521 to any other port number."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "1521"
- STARTS_WITH:
prefix:
TEXT: "oracle-"
arg:
EXTRACT: "CA10__engine__c"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 5432 used for PostgreSQL-compatible database."
remediationMessage: "Change the port from 5432 to any other port number."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "5432"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-postgresql"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "postgres"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 1433 used for MSSQL server."
remediationMessage: "Change the port from 1433 to any other port number."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "1433"
- STARTS_WITH:
prefix:
TEXT: "sqlserver-"
arg:
EXTRACT: "CA10__engine__c"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 27017 used for DocumentDB."
remediationMessage: "Change the port from 27017 to any other port number."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "27017"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "docdb"
- status: "INAPPLICABLE"
currentStateMessage: "This Database Engine is not checked by the policy."
check:
AND:
args:
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-mysql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mariadb"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mysql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "docdb"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-postgresql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "postgres"
- NOT:
arg:
STARTS_WITH:
prefix:
TEXT: "oracle-"
arg:
EXTRACT: "CA10__engine__c"
- NOT:
arg:
STARTS_WITH:
prefix:
TEXT: "sqlserver-"
arg:
EXTRACT: "CA10__engine__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "Database uses non-default port for its engine."