Connections to Redshift Serverless workgroups should be required to use SSL

How to fix it

Set the workgroup's require_ssl configuration parameter to true, so the database refuses connections that do not negotiate TLS. Redshift Serverless restarts the workgroup when this parameter changes, and any client still connecting without TLS will stop connecting, so check drivers and connection strings first.

With the AWS CLI

aws redshift-serverless update-workgroup --workgroup-name <workgroup-name> --config-parameters parameterKey=require_ssl,parameterValue=true --region <region>

With Terraform

resource "aws_redshiftserverless_workgroup" "this" {
  namespace_name = var.namespace_name
  workgroup_name = var.workgroup_name

  config_parameter {
    parameter_key   = "require_ssl"
    parameter_value = "true"
  }
}