Medium
DocumentDB
Regional
Amazon DocumentDB clusters should be encrypted in transit
FSBP
Description
Ensures DocumentDB clusters require TLS for all client connections. Non-TLS connections are not permitted, protecting data in transit from interception.
Remediation
Configure your Amazon DocumentDB cluster to use TLS encryption in transit by setting the TLS parameter in the cluster parameter group.
Steps
- Open the Amazon DocumentDB console.
- Choose 'Parameter groups' from the navigation pane.
- Select the cluster parameter group associated with your cluster.
- Choose 'Edit parameters'.
- Find the 'tls' parameter and set it to 'tls1.2+', 'tls1.3+', or 'fips-140-3'.
- Choose 'Save changes' and apply the changes to your cluster.
Compliance
FSBP