RDS Unencrypted at Rest
In the absence of encryption at rest, compromised data can be easily read. RDS Database instances encryption at rest enhances data protection by safeguarding against unauthorised access to the underlying storage.
Remediation
Enable encryption for RDS instances. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance
Metadata
- Severity: informational
- Slug: rds-unencrypted-at-rest
CWEs
- 325: Missing Cryptographic Step
OWASP
- A02:2021: Cryptographic Failures
