Question 1

Is allow_version_upgrade enforced for GDPR?

Accepted Answer

Yes, Ensure whether AWS Redshift clusters have the specified maintenance settings. Redshift clusters `allowVersionUpgrade` should be set to `true` and `automatedSnapshotRetentionPeriod` should be greater than 7.

Question 2

Is automated_snapshot_retention_period enforced for GDPR?

Accepted Answer

Yes, This control checks whether AWS Redshift clusters have automated snapshots enabled. It also checks whether the snapshot retention period is greater than or equal to seven.

Question 3

Is cloudwatch_log_group_kms_key_id enforced for GDPR?

Accepted Answer

Yes, To help protect sensitive data at rest, ensure encryption is enabled for your AWS CloudWatch Log Group.

Question 4

Is cluster_identifier enforced for GDPR?

Accepted Answer

Yes, This control ensures if redshift clusters are logging audits to a specific bucket. The rule is no compliant if audit logging is not enabled for a redshift cluster or if the 'bucketNames' parameter is provided but the audit logging destination does not match.

Question 5

Is encrypted enforced for GDPR?

Accepted Answer

Yes, Ensure that your AWS Redshift clusters require TLS/SSL encryption to connect to SQL clients.

Control	Clause	Change
Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled None	None
Redshift clusters should have audit logging enabledredshift_cluster_audit_logging_enabled None	None
Redshift clusters should have automatic snapshots enabledredshift_cluster_automatic_snapshots_min_7_days None	None
Redshift cluster encryption in transit should be enabledredshift_cluster_encryption_in_transit_enabled None	None
Redshift clusters should have required maintenance settingsredshift_cluster_maintenance_settings_check None	None

Controls