More
AWS Foundational Security Best Practice
RDS instances should not use a database engine default port
This control checks whether RDS instances use the default port of that database engine.