---
title: DynamoDB Accelerator clusters should be encrypted in transit
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > DynamoDB Accelerator clusters should be
  encrypted in transit
---

# DynamoDB Accelerator clusters should be encrypted in transit
 
## Description{% #description %}

DynamoDB Accelerator (DAX) clusters should be encrypted in transit. Enabling TLS encryption protects data as it moves between clients and DAX clusters, helping prevent unauthorized access or interception.

## Remediation{% #remediation %}

To enable encryption in transit for your DAX clusters, you must develop and implement a migration plan. For more details, see [DAX encryption in transit](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DAXEncryptionInTransit.html).

**Note**: Encryption settings cannot be modified after cluster creation.