Pattern: Disabled at-rest encryption for AWS EC2 launch config
Issue: -
Block devices should be encrypted to ensure sensitive data is held securely at rest.
Resolution: Turn on encryption for all block devices.
The following example will fail the aws-ec2-enable-launch-config-at-rest-encryption check.
resource "aws_launch_configuration" "bad_example" {
root_block_device {
encrypted = false
}
}
The following example will pass the aws-ec2-enable-launch-config-at-rest-encryption check.
resource "aws_launch_configuration" "good_example" {
root_block_device {
encrypted = true
}
}