CloudWiki
Rules
Medium

Ensure Redshift clusters Version Upgrade feature is enabled

Security & Compliance
Description

To ensure that Redshift clusters receive upgrades automatically during the maintenance window, enable the "Allow Version Upgrade" feature. With this feature enabled, Amazon Redshift engine upgrades, also known as major version upgrades, will occur automatically. This will ensure that the data warehouse service engine has access to the newest features, bug fixes, or the latest security patches released.

Remediation

To ensure that the Version Upgrade feature is enabled for your Redshift clusters, follow these remediation steps:

  1. Log in to the AWS Management Console and navigate to the Amazon Redshift dashboard.
  2. Select the target Redshift cluster.
  3. Click on the "Properties" tab.
  4. Scroll down to the "Cluster Upgrade" section.
  5. Ensure that the "Allow Version Upgrade" option is enabled.
  6. If the option is disabled, select the checkbox to enable it.
  7. Click on the "Modify" button to apply the changes.
  8. Repeat these steps for all Redshift clusters that need to have the Version Upgrade feature enabled.
Enforced Resources
Note: Remediation steps provided by Lightlytics are meant to be suggestions and guidelines only. It is crucial to thoroughly verify and test any remediation steps before applying them to production environments. Each organization's infrastructure and security needs may differ, and blindly applying suggested remediation steps without proper testing could potentially cause unforeseen issues or vulnerabilities. Therefore, it is strongly recommended that you validate and customize any remediation steps to meet your organization's specific requirements and ensure that they align with your security policies and best practices.