SSL Encryption Is Enabled for DWS Clusters

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	dws-enable-ssl
Identifier	SSL Encryption Is Enabled for DWS Clusters
Description	If SSL encryption is not enabled for a GaussDB(DWS) cluster, this cluster is non-compliant.
Tag	dws
Trigger Type	Configuration change
Filter Type	dws.clusters
Rule Parameters	None

Application Scenarios

Without the use of Secure Sockets Layer (SSL), data transmitted between a GaussDB(DWS) instance and server is vulnerable to eavesdropping, tampering, and man-in-the-middle attacks. To improve data transmission security, enable SSL to encrypt communication.

Solution

Establishing Secure TCP/IP Connections in SSL Mode.

Rule Logic

If SSL encryption is not enabled for a GaussDB(DWS) cluster, this cluster is non-compliant.
If SSL encryption is enabled for a GaussDB(DWS) cluster, this cluster is compliant.

Parent topic: Data Warehouse Service

Previous topic: Automated Snapshots are Enabled for DWS Clusters

Next topic: DWS Clusters Should Not Use EIPs