Best practices

RDS database cluster snapshot is not using customer-managed KMS keys

Platform(s)
Compliance Frameworks

Description

RDS database cluster snapshots are backups for RDS clusters and can be used to restore a cluster. RDS database cluster snapshot '{AwsRdsDbClusterSnapshot}' is encrypted using the default AWS-managed KMS key (key id: '{AwsRdsDbClusterSnapshot.KmsKey.KeyId}'). Cluster snapshots should be encrypted using a customer-managed KMS key in order to enable more control over the key
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.