Alibaba Cloud MongoDB does not have transparent data encryption enabled misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC_ALI_44
Category - Subcategory	Storage - Encryption
Provider	ALIBABA_CLOUD
Severity	LOW
Framework	Terraform

Impact

Transparent Data Encryption (TDE) for your Alibaba Cloud MongoDB instance helps safeguard your data from unauthorized access or tampering. TDE encrypts data as it is written to disk and transparently decrypts it when accessed. By enabling TDE, you ensure that only authorized users with the correct keys can access and decrypt the data, providing robust protection for data at rest.

How to Fix

Resource: alicloud_mongodb_instance

• Arguments: tde_status

To mitigate this issue, ensure the tde_status attribute in the alicloud_mongodb_instance resource is set to enabled.

Example: [source,go]

resource "alicloud_mongodb_instance" "example" { ...

• tde_status = "enabled" }

---