Query: RDS for SQL Server DB instances should be encrypted in transit

Description

This control checks whether a connection to an Amazon RDS for Microsoft SQL Server DB instance is encrypted in transit. The control fails if the rds.force_ssl parameter of the parameter group associated with the DB instance is set to 0 (off).

Query

Tables used in this query:

• aws_rds_db_instance
• aws_rds_db_parameter_group

Controls using this query:

• 41 RDS for SQL Server DB instances should be encrypted in transit
• RDS for SQL Server DB instances should be encrypted in transit

SQL