AWS RDS DB cluster encryption is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_16
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	bf007096-b372-4921-848c-11b29e042f4f

Impact

AWS RDS is a managed DB service enabling quick deployment and management of MySQL, MariaDB, PostgreSQL, Oracle, and Microsoft SQL Server DB engines. Native RDS encryption helps protect your cloud applications and fulfils compliance requirements for data-at-rest encryption.

How to Fix

To mitigate this issue, set the StorageEncrypted attribute of the AWS::RDS::DBInstance to true. [source,go]

Resources: DB: Type: 'AWS::RDS::DBInstance' Properties: ...

• StorageEncrypted: true

---