🧠 AWS RDS Instance has a common master username - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/aws/rds/instance-master-username/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 AWS RDS Instance
• 🔌 AWS RDS Instance - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-01-31T12:02:14.192502905Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__status__c') != 'available'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__clusterArn__c').isNotEmpty()	✔️ null
🟢	test4	✔️ 599	✔️ setOfText(['root', 'admin', 'administrator', 'adminuser', 'superuser', 'sa', 'sysadmin', 'dbadmin', 'user', 'dbuser', 'sys', 'system', 'awsuser', 'mysql', 'oracle', 'postgres']).contains(extract('CA10__masterUsername__c'))	✔️ null
🟢	test5	✔️ 600	✔️ otherwise	✔️ null
🟢	test6	✔️ 399	✔️ extract('CA10__engine__c') == 'neptune'	✔️ null
🟢	test7	✔️ 499	✔️ extract('CA10__engine__c') == 'docdb'	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/aws/rds/instance-master-username/policy.yaml	80700121792B1CECE3AC46FC4F1CF6CD
Open	/ce/ca/aws/rds/instance-master-username/prod.logic.yaml	F90953BC2911218964FBB857E9374A72
Open	/ce/ca/aws/rds/instance-master-username/test-data.json	F1234693ED9A5FB318189E06022D7A97
Open	/types/CA10__CaAwsDbInstance__c/object.extracts.yaml	E3FA5A211AA9AD2418645BB09047D3D3

Available Commands

repo-manager policies generate FULL /ce/ca/aws/rds/instance-master-username/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/instance-master-username/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/instance-master-username/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/instance-master-username/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/instance-master-username/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAwsDbInstance__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaAwsDbInstance__c/object.extracts.yaml
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "The Instance is not available."
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10__status__c"
        right:
          TEXT: "available"
  - status: "INAPPLICABLE"
    currentStateMessage: "This policy doesn't apply to Cluster Instances."
    check:
      NOT_EMPTY:
        arg:
          EXTRACT: "CA10__clusterArn__c"
  - status: "INAPPLICABLE"
    currentStateMessage: "This policy doesn't apply to Neptune."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__engine__c"
        right:
          TEXT: "neptune"
  - status: "INAPPLICABLE"
    currentStateMessage: "This policy doesn't apply to DocumentDB."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__engine__c"
        right:
          TEXT: "docdb"          
  - status: "INCOMPLIANT"
    currentStateMessage: "The RDS Instance has default or insecure admin username."
    remediationMessage: "Change the instance admin username."
    check:
      CONTAINS:
        arg:
          SET:
            itemType: "TEXT"
            items:
              - "root"
              - "admin"
              - "administrator"
              - "adminuser"
              - "superuser"
              - "sa"
              - "sysadmin"
              - "dbadmin"
              - "user"
              - "dbuser"
              - "sys"
              - "system"
              - "awsuser"
              - "mysql"
              - "oracle"
              - "postgres"
        search:
          EXTRACT: "CA10__masterUsername__c"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The RDS Instance has a custom admin username."