AWS Kinesis streams encryption is using default KMS keys instead of Customer's Managed Master Keys m

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_185
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

This rule identifies the AWS Kinesis streams which are encrypted with default KMS keys and not with Master Keys managed by Customer. It is a best practice to use customer managed Master Keys to encrypt your Amazon Kinesis streams data. It gives you full control over the encrypted data.

How to Fix

Resource: aws_kinesis_stream

• Arguments: kms_key_id [source,go]

---

resource "aws_kinesis_stream" "pass" { ... kms_key_id = aws_kms_key.sse_aws_kms_key_id.id }