Severity: HighCritical
Description: This control ensures that RDS DB Instance is not associated with a public subnet.Having any resources such as RDS DB Instances in a public subnet should be avoided unless absolutely needed as they can be accessed from the Internet.
...