Aurora - Deletion protection is at cluster level and not DB instance level - foundational security logic should be updated

[twratl]

Describe the bug
I am seeing some controls in alarm status for "RDS DB instances should have deletion protection enabled" for instances which are part of an Aurora cluster. For Aurora, deletion protection is only at the cluster level.

Steampipe version (steampipe -v)
0.14.5

Plugin version (steampipe plugin list)
0.60.0

To reproduce
steampipe check benchmark.foundational_security_rds in an account/region with Aurora clusters and the cluster has deletion protection enabled.

Expected behavior
Ignore "RDS DB instances should have deletion protection enabled" control if the instance is part of an Aurora cluster.

[rajlearner17]

Hi, @twratl Thanks for notifying this!
Additionally, I see the same behaviour may apply to Neptune DB instances and Amazon DocumentDB clusters.

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-rds-7
https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-deletion-protection-enabled.html

I think we can skip these DB engines based on the engine type. We will make the change in query and release it in the upcoming schedule.