🧠 AWS RDS Instance uses default endpoint port - prod.logic.yaml🟢
- Contextual name: 🧠 prod.logic.yaml🟢
- ID:
/ce/ca/aws/rds/instance-default-port/prod.logic.yaml - Tags:
Uses
Test Results 🟢
Generated at: 2026-02-10T22:33:10.655314089Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| 🟢 | test1 | ✔️ 99 | ✔️ isDisappeared(CA10__disappearanceTime__c) | ✔️ null |
| 🟢 | test2 | ✔️ 199 | ✔️ extract('CA10__endpointPort__c') == '3306' && (extract('CA10__engine__c') == 'aurora' || extract('CA10__engine__c') == 'aurora-mysql' || extract('CA10__engine__c') == 'mariadb' || extract('CA10__engine__c') == 'mysql') | ✔️ null |
| 🟢 | test3 | ✔️ 299 | ✔️ extract('CA10__endpointPort__c') == '1521' && extract('CA10__engine__c').startsWith('oracle-') | ✔️ null |
| 🟢 | test4 | ✔️ 399 | ✔️ extract('CA10__endpointPort__c') == '5432' && (extract('CA10__engine__c') == 'aurora-postgresql' || extract('CA10__engine__c') == 'postgres') | ✔️ null |
| 🟢 | test5 | ✔️ 499 | ✔️ extract('CA10__endpointPort__c') == '1433' && extract('CA10__engine__c').startsWith('sqlserver-') | ✔️ null |
| 🟢 | test6 | ✔️ 599 | ✔️ extract('CA10__endpointPort__c') == '27017' && extract('CA10__engine__c') == 'docdb' | ✔️ null |
| 🟢 | test7 | ✔️ 699 | ✔️ extract('CA10__engine__c') != 'aurora' && extract('CA10__engine__c') != 'aurora-mysql' && extract('CA10__engine__c') != 'mariadb' && extract('CA10__engine__c') != 'mysql' && extract('CA10__engine__c') != 'docdb' && extract('CA10__engine__c') != 'aurora-postgresql' && extract('CA10__engine__c') != 'postgres' && not(extract('CA10__engine__c').startsWith('oracle-')) && not(extract('CA10__engine__c').startsWith('sqlserver-')) | ✔️ null |
| 🟢 | test8 | ✔️ 700 | ✔️ otherwise | ✔️ null |
Generation Bundle
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/rds/instance-default-port/policy.yaml | 420BC7497C968AB38CA127F96FF36741 |
| Open | /ce/ca/aws/rds/instance-default-port/prod.logic.yaml | FB51ACEE3F170BF164A6455CCC03D493 |
| Open | /ce/ca/aws/rds/instance-default-port/test-data.json | E2B0EE8EB649E7A1F693CBBFC3A8A202 |
| Open | /types/CA10__CaAwsDbInstance__c/object.extracts.yaml | E3FA5A211AA9AD2418645BB09047D3D3 |
Available Commands
repo-manager policies generate FULL /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/instance-default-port/prod.logic.yaml
Content
---
inputType: "CA10__CaAwsDbInstance__c"
importExtracts:
- file: "/types/CA10__CaAwsDbInstance__c/object.extracts.yaml"
testData:
- file: "test-data.json"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "Default port 3306 is used for a MySQL-compatible database."
remediationMessage: "Change the port from 3306 to a non-default value."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "3306"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-mysql"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mariadb"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mysql"
- status: INCOMPLIANT
currentStateMessage: "Default port 1521 is used for an Oracle database."
remediationMessage: "Change the port from 1521 to a non-default value."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "1521"
- STARTS_WITH:
search:
TEXT: "oracle-"
arg:
EXTRACT: "CA10__engine__c"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 5432 is used for a PostgreSQL-compatible database."
remediationMessage: "Change the port from 5432 to a non-default value."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "5432"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-postgresql"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "postgres"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 1433 is used for an MSSQL database."
remediationMessage: "Change the port from 1433 to a non-default value."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "1433"
- STARTS_WITH:
search:
TEXT: "sqlserver-"
arg:
EXTRACT: "CA10__engine__c"
- status: "INCOMPLIANT"
currentStateMessage: "Default port 27017 is used for DocumentDB."
remediationMessage: "Change the port from 27017 to a non-default value."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__endpointPort__c"
right:
TEXT: "27017"
- IS_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "docdb"
- status: "INAPPLICABLE"
currentStateMessage: "This database engine is not checked by the policy."
check:
AND:
args:
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-mysql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mariadb"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "mysql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "docdb"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "aurora-postgresql"
- NOT_EQUAL:
left:
EXTRACT: "CA10__engine__c"
right:
TEXT: "postgres"
- NOT:
arg:
STARTS_WITH:
search:
TEXT: "oracle-"
arg:
EXTRACT: "CA10__engine__c"
- NOT:
arg:
STARTS_WITH:
search:
TEXT: "sqlserver-"
arg:
EXTRACT: "CA10__engine__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The database uses a non-default port for its engine."