DocumentDB global cluster does not encrypt storage

What it checks

DocumentDB global cluster does not encrypt storage

Where it applies

Terraform: aws_docdb_global_cluster

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Set storage_encrypted = true on the global cluster (regional members inherit it). Encryption is set at creation, so an existing unencrypted global cluster must be recreated.

Frameworks

• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules