When SourceDBInstanceIdentifier is set for AWS::RDS::DBInstance (a replica in a cluster), cf-nag (latest version) alerts with | FAIL F27 | | Resource: [our replica name>] | Line Numbers: [the line number] | | RDS DBInstance should have StorageEncrypted enabled see [aws-resource-rds-dbinstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#cfn-rds-dbinstance-storageencrypted) This was also previously addressed in [184](https://github.com/stelligent/cfn_nag/pull/184)