Cortex CloudApplication Security
AWS copied AMIs are not encrypted misconfiguration detected in code
Rule Details
Cortex AppSec Rule ID
APPSEC_AWS_235
Category - Subcategory
Storage - Encryption
Provider
AWS
Severity
LOW
Framework
Terraform
Impact
As a best practice enable encryption for your AWS copied AMIs to improve data security without making changes to your business or applications.
How to Fix
[source,go]
resource "aws_ami_copy" "pass" { name = "terraform-example" description = "A copy of ami-xxxxxxxx" source_ami_id = "ami-xxxxxxxx" source_ami_region = "us-west-1" encrypted = true tags = { Name = "HelloWorld" test = "failed" } }
PreviousAWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK) misconfiguration
NextAWS AMI copying does not use a Customer Managed Key (CMK) misconfiguration detected in code
Last updated
Was this helpful?
