AWS Redshift does not have require_ssl configured misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_105
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	7446ad28-8502-4d71-b334-18cef8d85a2b

Impact

This rule identifies Redshift databases in which data connection to and from is occurring on an insecure channel. SSL connections ensures the security of the data in transit.

How to Fix

Resource: AWS::Redshift::ClusterParameterGroup

• Arguments: Properties.Parameters [source,go]

---

Type: AWS::Redshift::ClusterParameterGroup Properties: ... Parameters:

• • ParameterName: "require_ssl"
• ParameterValue: "true"

---