Severity Framework
Snyk CCSS
Rule category
Data / Encryption at Rest
Is your enviroment affected by this misconfiguration?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsFrameworks
CIS-AWS
CIS-Controls
CSA-CCM
GDPR
HIPAA
ISO-27001
NIST-800-53
SOC-2
- Snyk ID SNYK-CC-00248
- credit Snyk Research Team
Description
RDS cluster does not have encryption at rest enabled, which means data is stored on cluster in plaintext.
How to fix?
Ensure that the storage_encrypted
attribute is set to true
.
Example Configuration
resource "aws_rds_global_cluster" "example" {
storage_encrypted = true
# other required fields here
}