AWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK) misconfiguration

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_221
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

This rule identifies Code Artifact Domains which are encrypted with default KMS keys and not with Keys managed by Customer. It is a best practice to use customer managed KMS Keys to encrypt your Code Artifact Domain data. It gives you full control over the encrypted data.

How to Fix

[source,go]

resource "aws_codeartifact_domain" "pass" { domain = "example" encryption_key = aws_kms_key.example.arn tags = { "key" = "value" } }