Amazon Redshift gets new default settings to prevent data breaches

AWS announced three new default security controls for Amazon Redshift to reduce misconfiguration risks: public access is disabled by default (VPC-only), encryption is enabled by default using customer-specified or AWS-owned KMS keys, and SSL/TLS is enforced for connections. These changes apply to newly created provisioned clusters, serverless workgroups, and restored clusters, and may affect workflows that rely on public access, unencrypted clusters, or non-SSL connections; customers are advised to review and update configurations accordingly.