github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/rds/AVD-AWS-0078/Terraform.md (about) 1 2 Enable encryption for RDS clusters and instances 3 4 ```hcl 5 resource "aws_rds_cluster_instance" "good_example" { 6 name = "bar" 7 performance_insights_enabled = true 8 performance_insights_kms_key_id = "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" 9 } 10 11 ``` 12 13 #### Remediation Links 14 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance#performance_insights_kms_key_id 15 16 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#performance_insights_kms_key_id 17