Back to Checks
e2enetworks

E2E Networks database clusters have SSL enabled on the master node

database_cluster_ssl_enabled
Service: databaseSeverity: high
OfficialBuilt-inVerified
Categories:encryption
Resource Type:NotDefined

E2E Networks database clusters should require SSL/TLS on the master node so that client connections and credentials are encrypted in transit.

Prowler logoProwlerprowler-provider-e2enetworks

Risk

Without SSL/TLS, database credentials and query data travel in plaintext and can be intercepted through man-in-the-middle or network eavesdropping attacks.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler e2enetworks --checks database_cluster_ssl_enabled

Recommendation

Enable SSL/TLS on the master node of database clusters to encrypt all client connections in transit.

Check Code

from prowler.lib.check.models import Check, CheckReportE2eNetworks
from prowler.providers.e2enetworks.services.database.database_client import (
    database_client,
)


class database_cluster_ssl_enabled(Check):
    """Check if E2E Networks database clusters have SSL enabled on the master node."""

    def execute(self) -> list[CheckReportE2eNetworks]:
        findings = []
        for cluster in database_client.clusters:
            report = CheckReportE2eNetworks(metadata=self.metadata(), resource=cluster)
            report.status = "PASS"
            report.status_extended = (
                f"Database cluster {cluster.name} has SSL enabled on the master node."
            )
            if not cluster.master_ssl_enabled:
                report.status = "FAIL"
                report.status_extended = f"Database cluster {cluster.name} does not have SSL enabled on the master node."
            findings.append(report)
        return findings

References