Connections to Redshift Serverless workgroups should be required to use SSL

How to fix it

• Interrupts service: Redshift Serverless restarts the workgroup when require_ssl changes, so make the change at a quiet time.
• Can break clients: Clients that connect without SSL are refused once this applies, so check drivers and connection strings first.

Settings

require_ssl

true

With the AWS CLI

aws redshift-serverless update-workgroup --workgroup-name <workgroup-name> --config-parameters parameterKey=require_ssl,parameterValue=true --region <region>

With Terraform

resource "aws_redshiftserverless_workgroup" "this" {
  namespace_name = var.namespace_name
  workgroup_name = var.workgroup_name

  config_parameter {
    parameter_key   = "require_ssl"
    parameter_value = "true"
  }
}