Subchapter 16.19

Elasticache Redis Replication Group Encryption At Transit Enabled Policy

READMEcloudtrail-server-side-encryption-enabled

Dms Endpoint Should Be SSL Configured Policy

READMEdms-endpoint-should-be-ssl-configured

Dms Endpoints Should Use SSL Policy

25 more in the appendix

Elasticache Redis Replication Group Encryption At Transit Enabled Policy

Raw file

hashicorp/agent-skills

examples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.policy.hcl

HCL9 lines478 B

1# Converted from HashiCorp PCI DSS Sentinel example: elasticache-redis-replication-group-encryption-at-transit-enabled.sentinel
2# Conversion quality: Perfect
3
4resource_policy "aws_elasticache_replication_group" "elasticache_redis_replication_group_encryption_at_transit_enabled" {
5    enforce {
6        condition = core::try(attrs.transit_encryption_enabled, false) == true
7        error_message = "ElastiCache replication groups must enable transit_encryption_enabled"
8    }
9}

elasticache-redis-replication-group-encryption-at-transit-enabled.policy.hcl on GitHub