Alibaba Cloud disk encryption is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_ALI_7
Category - Subcategory	Storage - Encryption
Provider	ALIBABA_CLOUD
Severity	LOW
Framework	Terraform

Impact

This rule identifies disks for which encryption is disabled. As a best practice enable disk encryption to improve data security without making changes to your business or applications. Snapshots created from encrypted disks and new disks created from these snapshots are automatically encrypted.

How to Fix

To mitigate this issue, ensure the encrypted attribute of the alicloud_disk resource is set to true. This enables encryption for the disk.

Example: [source,go]

resource "alicloud_disk" "example" { ...

• encrypted = true }

---