redshift-default-admin-check
Checks if an Amazon Redshift cluster has changed the admin username from its default value. The rule is NON_COMPLIANT if the admin username for a Redshift cluster is set to “awsuser” or if the username does not match what is listed in parameter.
Identifier: REDSHIFT_DEFAULT_ADMIN_CHECK
Resource Types: AWS::Redshift::Cluster
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West, US ISO East, Asia Pacific (Malaysia), US ISOB East, Israel (Tel Aviv), Canada West (Calgary) Region
Parameters:
- validAdminUserNames (Optional)
- Type: CSV
-
Comma-separated list of admin username(s) for Redshift clusters to use. Note: 'awsuser' is the default and not accepted.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
