Redshift Serverless namespaces should not use the default admin username¶

This control checks whether the admin username for an Amazon Redshift Serverless namespace is the default admin username, admin. The control fails if the admin username for the Redshift Serverless namespace is admin. You can optionally specify a list of admin usernames for the control to include in the evaluation.

How to fix¶

Attribute admin_username of aws_redshiftserverless_namespace must be non-empty.

Implementation options¶

Choose the option that matches how you manage Terraform. All options satisfy this control.

Option 1: Terraform AWS provider resources¶

If you manage resources directly, configure the relevant Terraform AWS provider resources to meet this control. See docs for the resources involved: aws_redshiftserverless_namespace.

resource "aws_redshiftserverless_namespace" "this" {
  admin_username = "rsadmin"
  db_name        = "mydb"
  log_exports    = ["connectionlog", "userlog"]
  namespace_name = "pofix-example-namespace"
}

Which option should I choose?

Compliance.tf module (recommended): controls enforced by default and mapped to frameworks.
Open source module (terraform-aws-modules): compatible by design with compliance.tf. Same variable names for an easy, low-change migration path when you are ready.
Terraform AWS provider resources: manage Terraform resources directly.

Tool mappings¶

Use these identifiers to cross-reference this control across tools, reports, and evidence.

Compliance.tf (CTF) Control: redshiftserverless_namespace_no_default_admin_username
AWS Config Managed Rule: REDSHIFT_SERVERLESS_DEFAULT_ADMIN_CHECK
Powerpipe Control: aws_compliance.control.redshiftserverless_namespace_no_default_admin_username