AWS Kinesis streams are not encrypted using Server Side Encryption misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_43
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	6ceaee38-344c-4249-8cff-eb62a8ee94ed

Impact

Amazon Kinesis Data Firehose is a streaming data pipeline service that can route messages to destinations such as S3, Redshift Elasticsearch and others. It can also be used to transform data properties before streaming to a defined destination. Kinesis provides server-side data encryption to protect sensitive information contained in the data stream. We recommend you ensure that your Kinesis streams are encrypted using server-side encryption (SSE).

How to Fix

Resource: AWS::Kinesis::Stream

• Arguments: Properties.StreamEncryption.EncryptionType [source,go]

---

Resources: KMSEncryption: Type: AWS::Kinesis::Stream Properties: ... StreamEncryption: ... EncryptionType: KMS