Redshift cluster is encrypted in transit

# Set require_ssl to true in the Redshift parameter group used by the cluster
resource "aws_redshift_parameter_group" "<example_resource_name>" {
  name   = "<example_resource_name>"
  family = "redshift-1.0"

  parameter {
    name  = "require_ssl"   # CRITICAL: Enforces TLS for client connections
    value = "true"          # CRITICAL: Enable SSL requirement
  }
}

# CloudFormation: Set require_ssl to true in the Redshift parameter group in use
Resources:
  <example_resource_name>:
    Type: AWS::Redshift::ClusterParameterGroup
    Properties:
      Description: Require SSL for Redshift connections
      ParameterGroupFamily: redshift-1.0
      Parameters:
        - ParameterName: require_ssl   # CRITICAL: Enforces TLS for client connections
          ParameterValue: true         # CRITICAL: Enable SSL requirement