Redshift cluster should not be publicly accessible
What it checks
Redshift cluster should not be publicly accessible
Where it applies
Terraform: aws_redshift_cluster
CloudFormation: AWS::Redshift::Cluster
How to fix it
- Set publicly_accessible = false. Access Redshift via a VPN, Direct Connect, or a bastion host within the VPC.
Frameworks
- AWS FSBP Redshift.1
- SOC 2 CC6.6
- PCI-DSS v4.0.1/1.4.4
- HIPAA 164.312(a)(1)
These mappings are advisory, not an attestation of compliance.