List `rds.force_ssl` RDS DB Parameter Group values for all DBs in the account. Dump results to CSV.

list-rds-force-ssl.sh

#!/bin/bash

# List `rds.force_ssl` RDS DB Parameter Group values for all DBs in the account.
# Dump the results to CSV.

OUTFILE="rds-force-ssl.$(date +%s).csv"

# Get all RDS parameter group names
parameter_groups=$(aws rds describe-db-parameter-groups --query "DBParameterGroups[].DBParameterGroupName" --output text)

# Loop through each parameter group and check rds.force_ssl status
for group in $parameter_groups; do
  echo "Checking rds.force_ssl for parameter group: $group"

  force_ssl=$(aws rds describe-db-parameters --db-parameter-group-name "$group" \
    --query "Parameters[?ParameterName=='rds.force_ssl'].{ParameterGroupName:'$group',Value:ParameterValue}" \
    --output text | awk '{print $2}')

  echo "$group,$force_ssl" >> $OUTFILE

done