AWS Redshift Terraform module
Upstream version 7.1.0
10 controls from PCI DSS v4.0 requirements
Terraform Module Source
pcidssv40.compliance.tf/terraform-aws-modules/redshift/awsLog group retention period should be at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
Log group encryption at rest should be enabled
log_group_encryption_at_rest_enabled
Framework requirement
AWS Redshift audit logging should be enabled
redshift_cluster_audit_logging_enabled
Framework requirement
AWS Redshift clusters should have automatic snapshots enabled
redshift_cluster_automatic_snapshots_min_7_days
Framework requirement
Redshift cluster encryption in transit should be enabled
redshift_cluster_encryption_in_transit_enabled
Framework requirement
AWS Redshift enhanced VPC routing should be enabled
redshift_cluster_enhanced_vpc_routing_enabled
Framework requirement
AWS Redshift clusters should be encrypted with KMS
redshift_cluster_kms_enabled
Framework requirement
AWS Redshift should have required maintenance settings
redshift_cluster_maintenance_settings_check6.3.3
Framework requirement
Redshift clusters should prohibit public access
redshift_cluster_prohibit_public_access
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement