diff --git a/README.md b/README.md
index a74fd8d..9d6cb66 100644
--- a/README.md
+++ b/README.md
@@ -83,7 +83,7 @@ module "cache_redis" {
 |------|-------------|------|---------|:--------:|
 | allow\_cidrs | List of CIDRs to allow connection to this DB | `list(string)` | `[]` | no |
 | allow\_security\_group\_ids | List of Security Group IDs to allow connection to this Redis | `list(string)` | `[]` | no |
-| at\_rest\_encryption\_enabled | n/a | `bool` | `false` | no |
+| at\_rest\_encryption\_enabled | n/a | `bool` | `true` | no |
 | automatic\_failover\_enabled | n/a | `bool` | `false` | no |
 | create\_subnet\_group | Create a subnet group | `bool` | `false` | no |
 | engine | n/a | `string` | n/a | yes |
diff --git a/_variables.tf b/_variables.tf
index 86a1da4..bfedd02 100644
--- a/_variables.tf
+++ b/_variables.tf
@@ -10,7 +10,7 @@ variable "automatic_failover_enabled" {
 
 variable "at_rest_encryption_enabled" {
   type    = bool
-  default = false
+  default = true
 }
 
 variable "transit_encryption_enabled" {