Encryption-in-flight

  Scenario: TLS enforcement on ELB resources
    Given I have AWS ELB resource defined
    When it contains listener
    Then it must contain ssl_certificate_id

  Scenario: Enforce encryption for EMR
    Given I have AWS EMR Security Configuration defined
    Then encryption in flight must be enabled

  Scenario: Enforce encryption in ElastiCache Replication
    Given I have AWS ElastiCache Replication Group defined
    Then encryption in flight must be enabled