Skip to content

Files

Latest commit

 

History

History
52 lines (41 loc) · 1.98 KB

aws-workspaces-enable-disk-encryption.md

File metadata and controls

52 lines (41 loc) · 1.98 KB

Pattern: Disabled encryption for AWS WorkSpace volume

Issue: -

Description

Workspace volumes for both user and root should be encrypted to protect the data stored on them.

Resolution: Root and user volume encryption should be enabled.

Examples

The following example will fail the aws-workspaces-enable-disk-encryption check.

 resource "aws_workspaces_workspace" "bad_example" {
 	directory_id = aws_workspaces_directory.test.id
 	bundle_id    = data.aws_workspaces_bundle.value_windows_10.id
 	user_name    = "Administrator"
   
 	workspace_properties {
 	  compute_type_name                         = "VALUE"
 	  user_volume_size_gib                      = 10
 	  root_volume_size_gib                      = 80
 	  running_mode                              = "AUTO_STOP"
 	  running_mode_auto_stop_timeout_in_minutes = 60
 	}
   }

The following example will pass the aws-workspaces-enable-disk-encryption check.

 resource "aws_workspaces_workspace" "good_example" {
 		directory_id 				   = aws_workspaces_directory.test.id
 		bundle_id    				   = data.aws_workspaces_bundle.value_windows_10.id
 		user_name    				   = "Administrator"
 		root_volume_encryption_enabled = true
 		user_volume_encryption_enabled = true
 	  
 		workspace_properties {
 		  compute_type_name                         = "VALUE"
 		  user_volume_size_gib                      = 10
 		  root_volume_size_gib                      = 80
 		  running_mode                              = "AUTO_STOP"
 		  running_mode_auto_stop_timeout_in_minutes = 60
 		}
 }

Further reading