AWS Kinesis Firehose's delivery stream is not encrypted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_240
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

As a best practice enable encryption for your AWS Kinesis Firehose's delivery stream to improve data security without making changes to your business or applications.

How to Fix

[source,go]

resource "aws_kinesis_firehose_delivery_stream" "pass" { name = "terraform-kinesis-firehose-test-stream" destination = "s3"

s3_configuration { role_arn = aws_iam_role.firehose_role.arn bucket_arn = aws_s3_bucket.bucket.arn }

server_side_encryption { enabled = true #default is false } tags = { test = "failed" } }