Medium
RDS
Regional
RDS DB clusters should be encrypted at rest
NIST 800-53ISO 27001HIPAA
Description
Verifies that RDS DB clusters are encrypted at rest.
Remediation
Take a snapshot of the unencrypted cluster and restore it as a new encrypted cluster.
Steps
- Take a snapshot of the existing unencrypted RDS DB cluster.
- Restore the snapshot as a new DB cluster with 'Storage encryption' enabled.
- Choose a KMS key for encryption during the restore process.
- Update your applications to point to the new encrypted cluster.
- Delete the old unencrypted cluster once verified.
Compliance
NIST 800-53ISO 27001HIPAA