Skip to content

Commit

Permalink
[resotocore][fix] broken sqs check (#1920)
Browse files Browse the repository at this point in the history
  • Loading branch information
aquamatthias committed Feb 15, 2024
1 parent b8bd5a9 commit 66b7928
Showing 1 changed file with 1 addition and 1 deletion.
Expand Up @@ -10,7 +10,7 @@
"risk": "If server-side encryption is not enabled for SQS queues, sensitive information in transit could be compromised. This leads to risks of data leakage, breach of compliance regulations, and potential damage to the organization's reputation.",
"severity": "medium",
"detect": {
"resoto": "is(aws_sqs_queue) and sqs_managed_sse_enabled==false"
"resoto": "is(aws_sqs_queue) and sqs_managed_sse_enabled==false and sqs_kms_master_key_id==null"
},
"remediation": {
"text": "To mitigate this risk, ensure server-side encryption is turned on for all Amazon SQS queues. If possible, leverage a Customer Master Key (CMK) for enhanced management and privacy benefits.",
Expand Down

0 comments on commit 66b7928

Please sign in to comment.