💼 [DocumentDB.6] Amazon DocumentDB clusters should be encrypted in transit

• ID: /frameworks/aws-fsbp-v1.0.0/documentdb/06

Description

This controls checks whether an Amazon DocumentDB cluster requires TLS for connections to the cluster. The control fails if the cluster parameter group associated with the cluster is not in sync, or the TLS cluster parameter is set to disabled or enabled.

You can use TLS to encrypt the connection between an application and an Amazon DocumentDB cluster. Use of TLS can help protect data from being intercepted while the data is in transit between an application and an Amazon DocumentDB cluster. Encryption in transit for an Amazon DocumentDB cluster is managed using the TLS parameter in the cluster parameter group that's associated with the cluster. When encryption in transit is enabled, secure connections using TLS are required to connect to the cluster.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/documentdb-controls.html#documentdb-6

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance