Best practices

Redshift encrypting data without CMK

Risk Level

Informational (4)

Platform(s)

Description

It was found that Redshift database is encrypted without KMS customer master keys. When the feature is disable, AWS uses default managed-keys.
  • Recommended Mitigation

    It is recommended to use KMS CMK to encrypt the database.