AWS Redshift Cluster not encrypted using Customer Managed Key misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_142
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	3597d4f8-7e3b-4c73-9418-00e3314e5f39

Impact

Encrypting your data and resources with KMS helps protect your data from unauthorized access or tampering. By encrypting your data, you can ensure that only authorized users can access and decrypt the data, and that the data is protected while in storage or in transit. Such action can help protect against external threats such as hackers or malware, as well as internal threats such as accidental or unauthorized access.

How to Fix

Resource: aws_redshift_cluster

• Arguments: kms_key_id [source,go]

---

resource "aws_redshift_cluster" "test" { ...

• kms_key_id = "someKey" }

---