All checks
Medium
Amazon DocumentDB clusters should be encrypted in transit
Ensures DocumentDB clusters require TLS for all client connections. Non-TLS connections are not permitted, protecting data in transit from interception.
- service
- DocumentDB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Configure your Amazon DocumentDB cluster to use TLS encryption in transit by setting the TLS parameter in the cluster parameter group.
- Open the Amazon DocumentDB console.
- Choose 'Parameter groups' from the navigation pane.
- Select the cluster parameter group associated with your cluster.
- Choose 'Edit parameters'.
- Find the 'tls' parameter and set it to 'tls1.2+', 'tls1.3+', or 'fips-140-3'.
- Choose 'Save changes' and apply the changes to your cluster.
See which of your accounts this check is failing on.
Book a demo