---
title: "RDS database cluster snapshot is not encrypted"
canonical: "https://kb.cynergy.app/space/MD/1209761794/RDS%20database%20cluster%20snapshot%20is%20not%20encrypted"
format: markdown
---
# Description

Encrypting RDS database cluster snapshots provides a safeguard against unauthorized access or tampering. By encrypting snapshots, you ensure that only authorized users can access or modify them, helping protect against external threats like hackers or malware and reducing risks from accidental or unauthorized internal access.

# Fix - Build time

## Terraform

- **Resource**: aws_db_cluster_snapshot
- **Argument**: storage_encrypted

`go aws_s3_bucket.test.tf resource "aws_db_cluster_snapshot" "example" { ... + storage_encrypted = true }`