DynamoDB Accelerator clusters should be encrypted in transit

Description

DynamoDB Accelerator (DAX) clusters should be encrypted in transit. Enabling TLS encryption protects data as it moves between clients and DAX clusters, helping prevent unauthorized access or interception.

Remediation

To enable encryption in transit for your DAX clusters, you must develop and implement a migration plan. For more details, see DAX encryption in transit

Note: Encryption settings cannot be modified after cluster creation.