Feature Request: AWS DynamoDB Tables using AWS-managed encryption keys

[rdegraaf-ncc3]

Is your feature request related to a problem? Please describe.

AWS DynamoDB can perform server-side encryption using either AWS-managed keys or KMS CMKs. KMS is the preferred approach as it allows control over access to the keys and provides an extra layer of security against accidental data exposure.

Describe the solution you'd like

ScoutSuite should check that all DynamoDB tables are using customer-managed KMS encryption. The encryption settings can be retrieved using the following AWS CLI command:

 aws dynamodb describe-table --table <table>

Documentation: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html

Describe alternatives you've considered

N/A

Additional context

N/A