In the absence of encryption at rest, compromised data can be easily read. DynamoDB table encryption at rest enhances data protection by safeguarding against unauthorised access to the underlying storage.

Remediation

• Enable encryption at rest for DynamoDB. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dax_cluster#server_side_encryption