Query: Amazon DocumentDB clusters should be encrypted in transit

Description

This controls checks whether an Amazon DocumentDB cluster requires TLS for connections to the cluster. The control fails if the cluster parameter group associated with the cluster is not in sync, or the TLS cluster parameter is set to disabled or enabled.

Query

Tables used in this query:

• aws_docdb_cluster
• aws_rds_db_cluster_parameter_group

Controls using this query:

• 6 Amazon DocumentDB clusters should be encrypted in transit
• Amazon DocumentDB clusters should be encrypted in transit

SQL