Alibaba Cloud launch template data disks are not encrypted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_ALI_32
Category - Subcategory	Storage - Encryption
Provider	ALIBABA_CLOUD
Severity	LOW
Framework	Terraform

Impact

As a best practice, enable encryption for your Alibaba Cloud launch template data disks to enhance data security. This ensures that sensitive data at rest is protected from unauthorized access, all while requiring no changes to your business processes or applications.

How to Fix

Resource: alicloud_ecs_launch_template

• Arguments: data_disks.encrypted

To mitigate this issue, ensure that the encrypted attribute for each data disk in the data_disks block is set to true.

Example: [source,go]

resource "alicloud_ecs_launch_template" "example" { ...

data_disks = [ { ...

• encrypted = true } ] }

---