Question 1

Is cluster_identifier enforced for ACSC ISM March 2023?

Accepted Answer

Yes, This control ensures if redshift clusters are logging audits to a specific bucket. The rule is no compliant if audit logging is not enabled for a redshift cluster or if the 'bucketNames' parameter is provided but the audit logging destination does not match.

Question 2

Is encrypted enforced for ACSC ISM March 2023?

Accepted Answer

Yes, Ensure that your AWS Redshift clusters require TLS/SSL encryption to connect to SQL clients.

Question 3

Is enhanced_vpc_routing enforced for ACSC ISM March 2023?

Accepted Answer

Yes, Ensure that AWS Redshift cluster has 'enhancedVpcRouting' enabled. The rule is non-compliant if 'enhancedVpcRouting' is not enabled or if the configuration.enhancedVpcRouting field is 'false'.

Question 4

Is kms_key_arn enforced for ACSC ISM March 2023?

Accepted Answer

Yes, Ensure Redshift cluster is encrypted using CMK. The rule is non-compliant if the Redshift clusters is not encrypted using CMK.

AWS Redshift Terraform module

Terraform Module Source