diff --git a/checkov/cloudformation/checks/resource/aws/RedshiftClusterEncryption.py b/checkov/cloudformation/checks/resource/aws/RedshiftClusterEncryption.py
new file mode 100644
index 000000000..f59004c91
--- /dev/null
+++ b/checkov/cloudformation/checks/resource/aws/RedshiftClusterEncryption.py
@@ -0,0 +1,26 @@
+from checkov.common.models.enums import CheckResult, CheckCategories
+from checkov.cloudformation.checks.resource.base_resource_check import BaseResourceCheck
+
+
+class RedshiftClusterEncryption(BaseResourceCheck):
+    def __init__(self):
+        name = "Ensure all data stored in the Redshift cluster is securely encrypted at rest"
+        id = "CKV_AWS_64"
+        supported_resources = ['AWS::Redshift::Cluster']
+        categories = [CheckCategories.ENCRYPTION]
+        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
+
+    def scan_resource_conf(self, conf):
+        """
+            Looks for encryption configuration at Redshift cluster:
+            https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html
+        :param conf: AWS::Redshift::Cluster configuration
+        :return: <CheckResult>
+        """
+        if 'Properties' in conf.keys():
+            if 'Encrypted' in conf['Properties'].keys():
+                if conf['Properties']['Encrypted'] == True:
+                    return CheckResult.PASSED
+        return CheckResult.FAILED
+
+check = RedshiftClusterEncryption()
diff --git a/checkov/terraform/checks/resource/aws/RedshiftClusterEncryption.py b/checkov/terraform/checks/resource/aws/RedshiftClusterEncryption.py
new file mode 100644
index 000000000..6e78b79dd
--- /dev/null
+++ b/checkov/terraform/checks/resource/aws/RedshiftClusterEncryption.py
@@ -0,0 +1,17 @@
+from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceValueCheck
+from checkov.common.models.enums import CheckCategories
+
+
+class RedshiftClusterEncryption(BaseResourceValueCheck):
+    def __init__(self):
+        name = "Ensure all data stored in the Redshift cluster is securely encrypted at rest"
+        id = "CKV_AWS_64"
+        supported_resources = ['aws_redshift_cluster']
+        categories = [CheckCategories.ENCRYPTION]
+        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
+
+    def get_inspected_key(self):
+        return "encryption"
+
+
+check = RedshiftClusterEncryption()

Add new checks: redshift encryption at rest
Encryption of data at rest(encrypted = true)
https://www.terraform.io/docs/providers/aws/d/redshift_cluster.html#encrypted
diff --git a/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED-2.yaml b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED-2.yaml
new file mode 100644
index 000000000..66feacfee
--- /dev/null
+++ b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED-2.yaml
@@ -0,0 +1,10 @@
+Resources:
+  myCluster:
+    Type: "AWS::Redshift::Cluster"
+    Properties:
+      DBName: "mydb"
+      MasterUsername: "master"
+      MasterUserPassword:
+        Ref: "MasterUserPassword"
+      NodeType: "ds2.xlarge"
+      ClusterType: "single-node"
diff --git a/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED.yaml b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED.yaml
new file mode 100644
index 000000000..4ca5e2184
--- /dev/null
+++ b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-FAILED.yaml
@@ -0,0 +1,11 @@
+Resources:
+  myCluster:
+    Type: "AWS::Redshift::Cluster"
+    Properties:
+      DBName: "mydb"
+      MasterUsername: "master"
+      MasterUserPassword:
+        Ref: "MasterUserPassword"
+      NodeType: "ds2.xlarge"
+      ClusterType: "single-node"
+      Encrypted: false
diff --git a/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-PASSED.yaml b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-PASSED.yaml
new file mode 100644
index 000000000..7a6880d0f
--- /dev/null
+++ b/tests/cloudformation/checks/resource/aws/example_RedshiftClusterEncryption/RedshiftClusterEncryption-PASSED.yaml
@@ -0,0 +1,11 @@
+Resources:
+  myCluster:
+    Type: "AWS::Redshift::Cluster"
+    Properties:
+      DBName: "mydb"
+      MasterUsername: "master"
+      MasterUserPassword:
+        Ref: "MasterUserPassword"
+      NodeType: "ds2.xlarge"
+      ClusterType: "single-node"
+      Encrypted: true
diff --git a/tests/cloudformation/checks/resource/aws/test_RedshiftClusterEncryption.py b/tests/cloudformation/checks/resource/aws/test_RedshiftClusterEncryption.py
new file mode 100644
index 000000000..6041578d2
--- /dev/null
+++ b/tests/cloudformation/checks/resource/aws/test_RedshiftClusterEncryption.py
@@ -0,0 +1,26 @@
+import os
+import unittest
+
+from checkov.cloudformation.checks.resource.aws.RedshiftClusterEncryption import check
+from checkov.cloudformation.runner import Runner
+from checkov.runner_filter import RunnerFilter
+
+
+class TestRedshiftClusterEncryption(unittest.TestCase):
+
+    def test_summary(self):
+        runner = Runner()
+        current_dir = os.path.dirname(os.path.realpath(__file__))
+
+        test_files_dir = current_dir + "/example_RedshiftClusterEncryption"
+        report = runner.run(root_folder=test_files_dir,runner_filter=RunnerFilter(checks=[check.id]))
+        summary = report.get_summary()
+
+        self.assertEqual(summary['passed'], 1)
+        self.assertEqual(summary['failed'], 2)
+        self.assertEqual(summary['skipped'], 0)
+        self.assertEqual(summary['parsing_errors'], 0)
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/tests/terraform/checks/resource/aws/test_RedshiftClusterEncryption.py b/tests/terraform/checks/resource/aws/test_RedshiftClusterEncryption.py
new file mode 100644
index 000000000..63caa565f
--- /dev/null
+++ b/tests/terraform/checks/resource/aws/test_RedshiftClusterEncryption.py
@@ -0,0 +1,36 @@
+import unittest
+
+from checkov.terraform.checks.resource.aws.RedshiftClusterEncryption import check
+from checkov.common.models.enums import CheckResult
+
+
+class TestRedshiftClusterEncryption(unittest.TestCase):
+
+    def test_failure(self):
+        resource_conf = {
+            "cluster_identifier": ["tf-redshift-cluster"],
+            "database_name": ["mydb"],
+            "master_username": ["foo"],
+            "master_password": ["Mustbe8characters"],
+            "node_type": ["dc1.large"],
+            "cluster_type": ["single-node"]
+        }
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.FAILED, scan_result)
+
+    def test_success(self):
+        resource_conf = {
+            "cluster_identifier": ["tf-redshift-cluster"],
+            "database_name": ["mydb"],
+            "master_username": ["foo"],
+            "master_password": ["Mustbe8characters"],
+            "node_type": ["dc1.large"],
+            "cluster_type": ["single-node"],
+            "encryption": [True]
+        }
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.PASSED, scan_result)
+
+
+if __name__ == "__main__":
+    unittest.main()

pip install -e .
parse_log_pytest
pytest
pytest
apt-get update apt-get install -y git
3.7
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
attrs @ file:///croot/attrs_1668696182826/work
boto3==1.12.43
botocore==1.15.49
certifi @ file:///croot/certifi_1671487769961/work/certifi
chardet==3.0.4
-e git+https://github.com/bridgecrewio/checkov.git@c2091482f54d5aca11969e7e7c1ddf96a5f49159#egg=checkov
colorama==0.4.3
docopt==0.6.2
docutils==0.15.2
dpath==1.5.0
flit_core @ file:///opt/conda/conda-bld/flit-core_1644941570762/work/source/flit_core
idna==2.8
importlib-metadata @ file:///tmp/build/80754af9/importlib-metadata_1648562407465/work
iniconfig @ file:///home/linux1/recipes/ci/iniconfig_1610983019677/work
jmespath==0.10.0
junit-xml==1.8
lark-parser==0.7.8
packaging @ file:///croot/packaging_1671697413597/work
pluggy @ file:///tmp/build/80754af9/pluggy_1648042572264/work
py @ file:///opt/conda/conda-bld/py_1644396412707/work
pytest==7.1.2
python-dateutil==2.9.0.post0
python-hcl2==0.2.5
PyYAML==5.2
requests==2.22.0
s3transfer==0.3.7
six==1.13.0
tabulate==0.8.6
termcolor==1.1.0
tomli @ file:///opt/conda/conda-bld/tomli_1657175507142/work
typing_extensions @ file:///croot/typing_extensions_1669924550328/work
urllib3==1.25.7
zipp @ file:///croot/zipp_1672387121353/work

name: checkov
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - attrs=22.1.0=py37h06a4308_0
  - ca-certificates=2025.2.25=h06a4308_0
  - certifi=2022.12.7=py37h06a4308_0
  - flit-core=3.6.0=pyhd3eb1b0_0
  - importlib-metadata=4.11.3=py37h06a4308_0
  - importlib_metadata=4.11.3=hd3eb1b0_0
  - iniconfig=1.1.1=pyhd3eb1b0_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.4.4=h6a678d5_1
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - ncurses=6.4=h6a678d5_0
  - openssl=1.1.1w=h7f8727e_0
  - packaging=22.0=py37h06a4308_0
  - pip=22.3.1=py37h06a4308_0
  - pluggy=1.0.0=py37h06a4308_1
  - py=1.11.0=pyhd3eb1b0_0
  - pytest=7.1.2=py37h06a4308_0
  - python=3.7.16=h7a1cb2a_0
  - readline=8.2=h5eee18b_0
  - setuptools=65.6.3=py37h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - tomli=2.0.1=py37h06a4308_0
  - typing_extensions=4.4.0=py37h06a4308_0
  - wheel=0.38.4=py37h06a4308_0
  - xz=5.6.4=h5eee18b_1
  - zipp=3.11.0=py37h06a4308_0
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - boto3==1.12.43
      - botocore==1.15.49
      - chardet==3.0.4
      - colorama==0.4.3
      - docopt==0.6.2
      - docutils==0.15.2
      - dpath==1.5.0
      - idna==2.8
      - jmespath==0.10.0
      - junit-xml==1.8
      - lark-parser==0.7.8
      - python-dateutil==2.9.0.post0
      - python-hcl2==0.2.5
      - pyyaml==5.2
      - requests==2.22.0
      - s3transfer==0.3.7
      - six==1.13.0
      - tabulate==0.8.6
      - termcolor==1.1.0
      - urllib3==1.25.7
prefix: /opt/conda/envs/checkov

tests/cloudformation/checks/resource/aws/test_RedshiftClusterEncryption.py::TestRedshiftClusterEncryption::test_summary tests/terraform/checks/resource/aws/test_RedshiftClusterEncryption.py::TestRedshiftClusterEncryption::test_failure tests/terraform/checks/resource/aws/test_RedshiftClusterEncryption.py::TestRedshiftClusterEncryption::test_success
checkov/cloudformation/checks/resource/aws/RedshiftClusterEncryption.py checkov/terraform/checks/resource/aws/RedshiftClusterEncryption.py
checkov/cloudformation/checks/resource/aws/RedshiftClusterEncryption.py checkov/terraform/checks/resource/aws/RedshiftClusterEncryption.py