Ensure that RDS database cluster snapshot is encrypted

Error: RDS database cluster snapshot is not encrypted

Bridgecrew Policy ID: BC_AWS_GENERAL_77
Checkov Check ID: CKV_AWS_146
Severity: MEDIUM

RDS database cluster snapshot is not encrypted

Description

Encrypting your RDS database cluster snapshots helps protect your data from unauthorized access or tampering. That way, you can ensure that only authorized users can access and modify the contents of your cluster snapshots. Such action can help protect against external threats such as hackers or malware, as well as internal threats such as accidental or unauthorized access.

Fix - Buildtime

Terraform

  • Resource: aws_db_cluster_snapshot
  • Argument: storage_encrypted
resource "aws_db_cluster_snapshot" "example" {
	...
+ storage_encrypted = true
}