Skip to content

Files

Latest commit

 

History

History
31 lines (22 loc) · 557 Bytes

aws-autoscaling-enable-at-rest-encryption.md

File metadata and controls

31 lines (22 loc) · 557 Bytes

Pattern: Disabled encryption for AWS block device

Issue: -

Description

Blocks devices should be encrypted to ensure sensitive data is hel securely at rest.

Resolution: Turn on encryption for all block devices.

Examples

Example of incorrect code:

resource "aws_launch_configuration" "bad_example" {
	root_block_device {
		encrypted = false
	}
}

Example of correct code:

resource "aws_launch_configuration" "good_example" {
	root_block_device {
		encrypted = true
	}
}