Question 1

Is automated_snapshot_retention_period enforced for EU GMP Annex 11?

Accepted Answer

Yes, This control checks whether AWS Redshift clusters have automated snapshots enabled. It also checks whether the snapshot retention period is greater than or equal to seven.

Question 2

Is cloudwatch_log_group_kms_key_id enforced for EU GMP Annex 11?

Accepted Answer

Yes, To help protect sensitive data at rest, ensure encryption is enabled for your AWS CloudWatch Log Group.

Question 3

Is encrypted enforced for EU GMP Annex 11?

Accepted Answer

Yes, To protect data at rest, ensure that encryption is enabled for your AWS Redshift clusters. You must also ensure that required configurations are deployed on AWS Redshift clusters. The audit logging should be enabled to provide information about connections and user activities in the database.

AWS Redshift Terraform module

Terraform Module Source