AWS Appsync API Cache is not encrypted in transit misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_215
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

This rule identifies the AWS Appsync API that are configured with disabled in-transit data encryption. It is recommended that these resources will be configured with in-transit data encryption to minimize risk for sensitive data being leaked.

How to Fix

[source,go]

resource "aws_appsync_api_cache" "pass" { api_id = aws_appsync_graphql_api.default.id transit_encryption_enabled = true at_rest_encryption_enabled = true ttl = 60 type = "SMALL" api_caching_behavior = "FULL_REQUEST_CACHING" }