Control: 4 ElastiCache for Redis replication groups should be encrypted at rest
Description
This control checks if ElastiCache for Redis replication groups are encrypted at rest. This control fails if an ElastiCache for Redis replication group isn't encrypted at rest.
Encrypting data at rest reduces the risk that an unauthenticated user gets access to data that is stored on disk. ElastiCache for Redis replication groups should be encrypted at rest for an added layer of security.
Remediation
To configure at-rest encryption on an ElastiCache for Redis replication group, see Enabling at-rest encryption in the Amazon ElastiCache User Guide.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_elasticache_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_elasticache_4 --shareSQL
This control uses a named query:
elasticache_replication_group_encryption_at_rest_enabled