Skip to content

Files

Latest commit

 

History

History
27 lines (18 loc) · 510 Bytes

AWS015.md

File metadata and controls

27 lines (18 loc) · 510 Bytes

Pattern: Unencrypted SQS queue

Issue: -

Description

Queues should be encrypted with customer managed KMS keys and not default AWS managed keys, in order to allow granular control over access to specific queues.

Resolution: Turn on SQS Queue encryption.

Examples

Example of incorrect code:

resource "aws_sqs_queue" "bad_example" {
	# no key specified
}

Example of correct code:

resource "aws_sqs_queue" "good_example" {
	kms_master_key_id = "/blah"
}