Aqua CSPM

RDS CMK Encryption

Quick Info

Plugin TitleRDS CMK Encryption
CloudAWS
CategoryRDS
DescriptionEnsures RDS instances are encrypted with KMS Customer Master Keys(CMKs).
More InfoRDS instances should be encrypted with Customer Master Keys in order to have full control over data encryption and decryption.
AWS Linkhttps://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
Recommended ActionRDS does not currently allow modifications to encryption after the instance has been launched, so a new instance will need to be created with KMS CMK encryption enabled.

Detailed Remediation Steps