---
type: post-synth-check
title: WAW021
description: RDS instance or cluster storage is not encrypted — enable encryption at rest
id: WAW021
severity: error
category: post-synth
lexicon: aws
docs: https://intentius.io/chant/lexicons/aws/rules/
---
RDS instance or cluster storage is not encrypted — enable encryption at rest

## Applies to

- [DbCluster](/types/DbCluster.md)
- [DbInstance](/types/DbInstance.md)
- [Type](/types/Type.md)