Skip to main content

RDS Instance Disk Encryption Enabled

ID: rule:aliyun:rds-instance-enabled-disk-encryption
Severity: high
IaC Types: ROS, Terraform

Description

Ensures RDS instances have disk encryption enabled.

Reason for Violation

Disk encryption protects the underlying data storage from unauthorized physical access.

Recommendation

Set encryption_key for the RDS instance to enable disk encryption.

Resource Types

  • ROS: ALIYUN::RDS::DBInstance
  • Terraform: alicloud_db_instance