AWS EBS volumes are not encrypted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_3
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Encrypting EBS volumes ensures that replicated copies of your images are secure even if they are accidentally exposed. AWS EBS encryption uses AWS KMS customer master keys (CMK) when creating encrypted volumes and snapshots. Storing EBS volumes in their encrypted state reduces the risk of data exposure or data loss. We recommend you encrypt all data stored in the EBS.

How to Fix

[source,go]

{ "Resources: NewVolume: Type: AWS::EC2::Volume Properties: ...

• Encrypted: true",

}