AWS RDS DB snapshot is not encrypted

Description

Encrypting your RDS database cluster snapshots helps protect your data from unauthorized access or tampering. That way, you can ensure that only authorized users can access and modify the contents of your cluster snapshots. Such action can help protect against external threats such as hackers or malware, as well as internal threats such as accidental or unauthorized access.

Code Example

resource "aws_db_cluster_snapshot" "example" {
    ...
+ storage_encrypted = true
}

Remediation

Terraform

• Resource: aws_db_cluster_snapshot
• Arguments: storage_encrypted

Rule Details

Field	Value
ID	IAC-0196
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AWS_146

References

• Checkov Rule

---