Neptune DB Clusters Are Not Encypted At Rest

Overview

This check verifies the encryption status of a Neptune DB cluster in terms of data at rest. The check results in failure if the Neptune DB cluster is not encrypted at rest.

Data at rest encompasses information stored in persistent, non-volatile storage over any period. Encryption serves as a safeguard to maintain the confidentiality of this data, minimizing the potential for unauthorized users to access it. By encrypting your Neptune DB clusters, you secure both data and metadata, preventing unauthorized access. Additionally, this practice aligns with compliance standards for encrypting data at rest in production file systems.

Vendor

AWS

Cloud Service

RDS

Related Controls

Neptune.1

Severity

3

Item Types

AWS::RDS::DBCluster