# Troubleshooting RDS Protection monitoring issues
<a name="troubleshooting-rds-protection-guardduty"></a>

GuardDuty RDS Protection analyzes and profiles your RDS login activity for potential access threats to the [Supported databases](rds-protection.md#rds-pro-supported-db). To collect security telemetry effectively, GuardDuty requires your database configured and operating without issues. If your database is misconfigured or experiencing issues, then security monitoring may be impacted. 

The following section provides common issues and steps to troubleshoot them.

## RDS storage full
<a name="troubleshoot-rds-protection-issues-storage-full"></a>

When your RDS instance runs out of storage, GuardDuty may not collect security telemetry. Reaching DB instance storage capacity allocation (`storage-full`) is a critical status, and RDS recommends fixing this issue immediately. For more information, see [Viewing instance status](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/accessing-monitoring.html) in the *Amazon RDS User Guide*.

To resolve the `storage-full` status, you can perform one of the following actions:
+ **Enable storage autoscaling (recommended)** – Enable Amazon RDS storage autoscaling to automatically manage storage capacity and prevent future `storage-full` conditions. For more information, see [Managing capacity automatically with Amazon RDS storage autoscaling](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.Autoscaling.html) in the *Amazon RDS User Guide*.
+ **Monitor your storage utilization** – Check your storage utilization using one of the following methods:
  + Use CloudWatch metrics to view details about the storage. For more information, see [CloudWatch Database Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Database-Insights.html) in the *Amazon CloudWatch User Guide*.
  + View storage metrics by following the steps in [Monitor metrics in an Amazon RDS instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Viewing_Unifiedmetrics.html) in the *Amazon RDS User Guide*.
+ **Modify storage capacity** – For information about increasing your instance's storage capacity, see [Increasing DB instance storage capacity](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.ModifyingExisting.html) in the *Amazon RDS User Guide*.

## Unsupported versions on primary database for RDS for PostgreSQL
<a name="troubleshoot-rds-protection-issues-unsupported-primary-database-rds-postgresql"></a>

RDS for PostgreSQL read replica instances require the primary database instance to be on supported database version and to be successfully replicated from the primary database. GuardDuty monitors your instances only when these requirements are met.

To resolve the unsupported version issue, do one of the following:
+ **Verify database version compatibility** – Check that your primary RDS for PostgreSQL database is running one of the supported versions. For more information, see [Supported databases](rds-protection.md#rds-pro-supported-db).
+ **Address potential replication issue** – Review and resolve any replication issues between primary and replica instances. For more information about doing this, see [Working with read replicas for RDS for PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PostgreSQL.Replication.ReadReplicas.html) in the *Amazon RDS User Guide*.

## Additional security considerations
<a name="guardduty-rds-protection-additional-security-considerations"></a>

If your organization has strict compliance requirements, we recommend implementing database auditing in addition to using RDS Protection. For more information about your security responsibilities and shared responsibility model, see [Security in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.html) in the *Amazon RDS User Guide*.