Medium
Redshift
Regional
Redshift clusters should be encrypted at rest
NISTISO 27001
Description
This control checks if Amazon Redshift clusters are encrypted at rest. The control fails if a Redshift cluster isn't encrypted at rest or if the encryption key is different from the provided key in the rule parameter.
Remediation
To modify a Redshift cluster to use KMS encryption, see Changing cluster encryption in the Amazon Redshift Management Guide.
Steps
- Navigate to the Amazon Redshift Management Console.
- Select the cluster you want to modify.
- In the cluster details, enable the encryption option.
- Choose an appropriate KMS key for encryption.
- Save the changes.
Compliance
NISTISO 27001