Control: Amazon Redshift clusters should be encrypted with KMS
Description
Ensure if Amazon Redshift clusters are using a specified AWS Key Management Service (AWS KMS) key for encryption. The rule is complaint if encryption is enabled and the cluster is encrypted with the key provided in the kmsKeyArn parameter. The rule is non complaint if the cluster is not encrypted or encrypted with another key.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.redshift_cluster_kms_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.redshift_cluster_kms_enabled --share
SQL
This control uses a named query:
redshift_cluster_kms_enabled