Pattern: Disabled encryption for AWS EBS volume
Issue: -
By enabling encryption on EBS volumes you protect the volume, the disk I/O and any derived snapshots from compromise if intercepted.
Resolution: Enable encryption of EBS volumes.
The following example will fail the aws-ec2-enable-volume-encryption check.
resource "aws_ebs_volume" "bad_example" {
availability_zone = "us-west-2a"
size = 40
tags = {
Name = "HelloWorld"
}
encrypted = false
}
The following example will pass the aws-ec2-enable-volume-encryption check.
resource "aws_ebs_volume" "good_example" {
availability_zone = "us-west-2a"
size = 40
tags = {
Name = "HelloWorld"
}
encrypted = true
}