Description

Identifies AWS RDS database snapshots that are not encrypted at rest. Unencrypted database snapshots pose a security risk as they could expose sensitive data if the snapshot storage is compromised. AWS RDS snapshots should always be encrypted to protect database contents.

Detection Strategy

• Scans all RDS database snapshots in the specified AWS region

• Reports a vulnerability when a snapshot's 'Encrypted' property is set to false

• Each vulnerability includes the snapshot's ARN and encryption status