AWS SNS topic has SSE disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_26
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Amazon SNS is a publishers and subscribers messaging service. When you publish messages to encrypted topics, customer master keys (CMK), powered by AWS KMS, can be used to encrypt your messages. If you operate in a regulated market, such as HIPAA for healthcare, PCI DSS for finance, or FedRAMP for government, you need to ensure sensitive data messages passed in this service are encrypted at rest.

How to Fix

[source,go]

Type: AWS::SNS::Topic Properties: ...

• KmsMasterKeyId: "kms_id"

---