AWS EBS volume region with encryption is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_106
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	CloudFormation, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	7a951e9f-02d2-4d9f-9441-29b545084585

Impact

This rule identifies AWS regions in which new EBS volumes are getting created without any encryption. Encrypting data at rest reduces unintentional exposure of data stored in EBS volumes. It is recommended to configure EBS volume at the regional level so that every new EBS volume created in that region will be enabled with encryption by using a provided encryption key.

How to Fix

Resource: aws_ebs_encryption_by_default

• Arguments: enabled [source,go]

---

resource "aws_ebs_encryption_by_default" "enabled" {

• enabled = true }

---