AWS Redshift Terraform module
Upstream version 7.1.1
9 controls from HIPAA Omnibus Rule 2013 requirements
Terraform Module Source
hipaa.compliance.tf/terraform-aws-modules/redshift/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365164.312(b)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled164.308(a)(1)(ii)(B)
Framework requirement
Redshift clusters should have audit logging enabled
redshift_cluster_audit_logging_enabled164.308(a)(1)(ii)(B)
Framework requirement
Redshift clusters should have automatic snapshots enabled
redshift_cluster_automatic_snapshots_min_7_days164.308(a)(4)(ii)(A)
Framework requirement
Redshift cluster encryption in transit should be enabled
redshift_cluster_encryption_in_transit_enabled164.314(b)(2)(iv)
Framework requirement
Redshift clusters should have enhanced VPC routing enabled
redshift_cluster_enhanced_vpc_routing_enabled164.312(e)(1)
Framework requirement
Redshift clusters should have KMS encryption enabled
redshift_cluster_kms_enabled164.314(b)(2)(iv)
Framework requirement
Redshift clusters should have required maintenance settings
redshift_cluster_maintenance_settings_check164.308(a)(4)(ii)(A)
Framework requirement
Redshift clusters should prohibit public access
redshift_cluster_prohibit_public_access164.308(a)(1)(ii)(B)
Framework requirement