When enabling Performance Insights on an RDS cluster or RDS DB Instance, and encryption key should be provided.
The encryption key specified in
performance_insights_kms_key_id references a KMS ARN
Data can be read from the RDS Performance Insights if it is compromised
Enable encryption for RDS clusters and instances
The following example will fail the aws-rds-enable-performance-insights check.
The following example will pass the aws-rds-enable-performance-insights check.