Set encrypted to true even though it's a default to keep sonarqube quiet

paradisec-archive · Oct 28, 2023 · a4f05ca · a4f05ca
1 parent e18d6d4
commit a4f05ca
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cdk/lib/app-stack.ts b/cdk/lib/app-stack.ts
@@ -55,6 +55,7 @@ export class AppStack extends cdk.Stack {
     const db = new rds.DatabaseInstance(this, 'RdsInstance', {
       engine: rds.DatabaseInstanceEngine.mysql({ version: rds.MysqlEngineVersion.VER_8_0 }),
       instanceType: ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE4_GRAVITON, ec2.InstanceSize.MICRO),
+      storageEncrypted: true, // NOTE: It defaults to true, but SonarQube doesn't seem to know that
       credentials: rds.Credentials.fromGeneratedSecret('nabu'),
       databaseName: 'nabu',
       vpc,