AWS Redshift instances are not encrypted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_64
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	0132bbb2-c733-4c36-9c5d-c58967c7d1a6

Impact

This rule identifies AWS Redshift instances which are not encrypted. These instances should be encrypted for clusters to help protect data at rest which otherwise can result in a data breach.

How to Fix

Resource: AWS::Redshift::Cluster

• Arguments: Properties.Encrypted

In order to mitigate this issue, ensure that Encrypted is set to true. [source,go]

Type: "AWS::Redshift::Cluster" Properties: ...

• Encrypted: true

---