Query: rds_db_snapshot_encrypted_at_rest

(
  select
    arn as resource,
    case
      when storage_encrypted then 'ok'
      else 'alarm'
    end as status,
    case
      when storage_encrypted then title || ' encrypted at rest.'
      else title || ' not encrypted at rest.'
    end as reason,
    region,
    account_id
  from
    aws_rds_db_cluster_snapshot
)
union
(
  select
    arn as resource,
    case
      when encrypted then 'ok'
      else 'alarm'
    end as status,
    case
      when encrypted then title || ' encrypted at rest.'
      else title || ' not encrypted at rest.'
    end as reason,
    region,
    account_id
  from
    aws_rds_db_snapshot
);