Neptune storage must be encrypted at rest
Encryption of Neptune storage ensures that if their is compromise of the disks, the data is still protected.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Enable encryption of Neptune storage
1
2
3
4
5
6
|
Resources:
GoodCluster:
Type: AWS::Neptune::DBCluster
Properties:
KmsKeyId: something
StorageEncrypted: true
|
Enable encryption of Neptune storage
1
2
3
4
|
resource "aws_neptune_cluster" "good_example" {
kms_key_arn = "test"
storage_encrypted = true
}
|
Links