turbot/terraform_aws_compliance
Loading controls...

Control: Amazon Redshift clusters should be encrypted with KMS

Description

Ensure if Amazon Redshift clusters are using a specified AWS Key Management Service (AWS KMS) key for encryption. The rule is complaint if encryption is enabled and the cluster is encrypted with the key provided in the kmsKeyArn parameter. The rule is non complaint if the cluster is not encrypted or encrypted with another key.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.redshift_cluster_kms_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.redshift_cluster_kms_enabled --share

SQL

This control uses a named query:

redshift_cluster_kms_enabled

Tags