Modification or Deletion of an AWS RDS Cluster — Detection Rule

Detects modifications to an RDS cluster or its deletion, which may indicate potential data exfiltration attempts, unauthorized access, or exposure of sensitive information.

Read the full analysis on IntelFusions