Redshift cluster should have encryption at rest enabled

What it checks

Redshift cluster: encryption at rest is not enabled.

Where it applies

Terraform: aws_redshift_cluster

CloudFormation: AWS::Redshift::Cluster

How to fix it

1. Set encrypted = true. Existing clusters require a modify operation (resize) to enable encryption — plan a maintenance window.

Frameworks

• AWS FSBP Redshift.10
• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules