include::../description.adoc[]

include::../ask-yourself.adoc[]

include::../recommended.adoc[]

== Sensitive Code Example

For https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance[aws_db_instance]:

----
resource "aws_db_instance" "database" {
  storage_encrypted = false  # Sensitive, disabled by default
}
----

== Compliant Solution

For https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance[aws_db_instance]:

----
resource "aws_db_instance" "database" {
  storage_encrypted = true
}
----

include::../see.adoc[]