# neptune-cluster-encrypted
<a name="neptune-cluster-encrypted"></a>

Checks if storage encryption is enabled for your Amazon Neptune DB clusters. The rule is NON\_COMPLIANT if storage encryption is not enabled. 



**Identifier:** NEPTUNE\_CLUSTER\_ENCRYPTED

**Resource Types:** AWS::RDS::DBCluster

**Trigger type:** Configuration changes

**Amazon Web Services Region:** All supported Amazon regions except Asia Pacific (New Zealand), China (Beijing), Asia Pacific (Thailand), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Milan), Amazon GovCloud (US-East), Amazon GovCloud (US-West), Mexico (Central), Asia Pacific (Taipei), Canada West (Calgary), Europe (Spain), Europe (Zurich) Region

**Parameters:**

KmsKeyArns (Optional)Type: CSV  
A comma-separated list of KMS key ARNs to compare with the KmsKeyId of the encrypted cluster.

## Amazon CloudFormation template
<a name="w2aac20c16c17b7e1169c19"></a>

To create Amazon Config managed rules with Amazon CloudFormation templates, see [Creating Amazon Config Managed Rules With Amazon CloudFormation Templates](aws-config-managed-rules-cloudformation-templates.md).