Neptune DB cluster snapshots should be encrypted at rest

Description

This control verifies whether a Neptune DB cluster snapshot is encrypted while stored.

Data at rest refers to information stored in persistent, non-volatile storage for any period of time. Encrypting data at rest helps protect its confidentiality, reducing the risk of unauthorized access. To enhance security, Neptune DB cluster snapshots should be encrypted while stored.

Remediation

For guidance on securing snapshots, please refer to the Creating a DB cluster snapshot in Neptune section of the Neptune User Guide.