AWS Redshift Terraform module
Upstream version 7.1.1
9 controls from ISO/IEC 27001:2022 requirements
Terraform Module Source
iso27001.compliance.tf/terraform-aws-modules/redshift/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled
Framework requirement
Redshift clusters should have audit logging enabled
redshift_cluster_audit_logging_enabled
Framework requirement
Redshift cluster encryption in transit should be enabled
redshift_cluster_encryption_in_transit_enabled
Framework requirement
Redshift clusters should have enhanced VPC routing enabled
redshift_cluster_enhanced_vpc_routing_enabled
Framework requirement
Redshift clusters should have KMS encryption enabled
redshift_cluster_kms_enabled
Framework requirement
Redshift clusters should have Multi-AZ deployments enabled
redshift_cluster_multiple_az_enabled
Framework requirement
Redshift clusters should prohibit public access
redshift_cluster_prohibit_public_access
Framework requirement
VPC security groups should restrict ingress from 0.0.0.0/0 or ::/0 to cassandra ports 7199 or 9160 or 8888
vpc_security_group_allows_ingress_to_cassandra_ports
Framework requirement