Encryption should be enabled for an RDS Aurora cluster.
When enabling encryption by setting the kms_key_id, the storage_encrypted must also be set to true.
Data can be read from the RDS cluster if it is compromised
Enable encryption for RDS clusters
The following example will fail the aws-rds-encrypt-cluster-storage-data check.
The following example will pass the aws-rds-encrypt-cluster-storage-data check.