A read replica may be created with network access rules or public accessibility that differ from the primary. The same data is then reachable through the replica under weaker protection, impacting its confidentiality.
Read Replicas are Deployed with Weaker Protections
CCC.RDMS.TH11
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.CP15 | Horizontal Scaling | The service may be configured to create read replicas of the primary database, in the same or another region, to serve read traffic. |
| CCC.Core.CP08 | Data Replication | The service automatically replicates data across multiple deployments simultaneously with parity, or may be configured to do so. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.CN11 | Apply Primary Protections to Read Replicas | Ensure that every read replica carries the same public access restriction and network access rules as its primary, so that the replicated data is not reachable under weaker protection. |