Fix the security warning from "redshift default admin check"

Question

Hi,

I am facing an issue of Redshift default admin. Security hub reports: This control checks whether a Redshift cluster has changed the Admin username from its default value. This control will fail if the admin username for a Redshift cluster is set to 'awsuser', or if the username does not match the provided parameter(s).

My current Redshfit cluster is using awsuser as the database admin user. How to fix this warning? Of cause, I can create a brand new Redshift cluster with a different admin user. But this approach raised another difficulty: restoring the snapshot to a new Redshift cluster.

Riku_Kobayashi · Answer

Hello.

As you know, the administrator username cannot be changed later, so you will need to recreate the cluster.

To modify this control, as described in the documentation below, you will need to change the admin username to something other than "awsuser".  
https://docs.aws.amazon.com/securityhub/latest/userguide/redshift-controls.html#redshift-8

If it is difficult to recreate the cluster, as of June 2024, it is not possible to change the user name, so I think the only option is to suppress Security Hub controls.  
https://docs.aws.amazon.com/securityhub/latest/userguide/finding-workflow-status.html

Fix the security warning from "redshift default admin check"

Add your answer

Relevant content