Pattern: Disabled encryption for AWS block device
Issue: -
Blocks devices should be encrypted to ensure sensitive data is hel securely at rest.
Resolution: Turn on encryption for all block devices.
Example of incorrect code:
resource "aws_launch_configuration" "bad_example" {
root_block_device {
encrypted = false
}
}
Example of correct code:
resource "aws_launch_configuration" "good_example" {
root_block_device {
encrypted = true
}
}