Redshift clusters should use enhanced VPC routing

Description

This control verifies if an Amazon Redshift cluster has Enhanced VPC Routing activated.

With Enhanced VPC Routing, all COPY and UNLOAD operations between the cluster and external data repositories are routed through your VPC. This allows you to leverage VPC features like security groups and network access control lists (ACLs) to secure network traffic. Additionally, you can monitor this traffic using VPC Flow Logs.

Remediation

For guidance on enabling Redshift enhanced VPC routing, please refer to the Enabling enhanced VPC routing section of the Amazon Redshift Management Guide.