Skip to main content
ASIRI

Connect RDS for database evidence

Collect database posture evidence for backup, encryption, retention, access, and recovery controls.

Back to help center Contact support
Help center
Integrations and evidence6 min readUpdated May 2026Integrations > RDS
Access needed
AdminIntegration managerDatabase administratorAWS administrator
ASIRI RDS backup recovery connector setup page with IAM role, trust policy, permission policy, monitored signals, and connection health
Use the RDS setup page to connect read-only database backup and recovery evidence before reviewing normalized evidence objects in Evidence Engine.
ASIRI evidence engine runs for database evidence
After sync, database evidence appears as normalized evidence objects with hashes, freshness, owners, and control mappings.

What RDS evidence proves

RDS evidence can support controls for encryption at rest, backup configuration, restore-test readiness, public exposure, privileged access, database inventory, and retention posture.

Use RDS evidence when production personal data is stored in managed databases and the database layer is in audit scope.

Prepare access

  1. 1Confirm the AWS account and regions that host in-scope databases.
  2. 2Use the AWS evidence role or a scoped read-only database evidence role according to your architecture.
  3. 3Confirm ASIRI is not given write access to customer databases.
  4. 4Document any excluded non-production databases before the first audit export.

Review results

  1. 1Run the RDS or AWS infrastructure sync.
  2. 2Open Evidence Engine and filter for database evidence.
  3. 3Review backup, encryption, exposure, and restore-readiness checks.
  4. 4Assign owners for failed or missing checks.
  5. 5Attach restore-test evidence when automated signals are not enough.
Related

Keep going in this area.

Connect AWS for infrastructure evidence

Use the AWS connector to collect read-only evidence for cloud posture, IAM, S3, CloudTrail, and security monitoring controls.

Read article

Understand evidence freshness and control coverage

Learn how ASIRI marks evidence as current, stale, expired, or missing and turns failed checks into remediation work.

Read article

Use the control coverage command center

Review every control by mapped connector, latest evidence, owner, blocker, and audit-readiness state.

Read article