RDS StorageEncrypted: false does not mean unencrypted

While verifying Aurora PostgreSQL Express Configuration, I saw StorageEncrypted: false in the describe-db-clusters output and assumed encryption was disabled.

Output

{
  "StorageEncrypted": false,
  "StorageEncryptionType": "sse-rds"
}

But the official documentation states: "Clusters with express configuration are encrypted with AWS/RDS Service owned keys." The API documentation defines StorageEncrypted as "whether the DB cluster is encrypted," so false while actually encrypted looks contradictory. It appears that sse-rds (RDS service-owned key) encryption introduced with Express Configuration is not reflected in the traditional StorageEncrypted field. Don't rely solely on API response field values to determine encryption status.