AWS EC2 Auto Scaling Launch Configuration is not using encrypted EBS volumes misconfiguration detect

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_8
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	b22e16a9-69a5-4d5b-b59c-4dc34fcd9d57

Impact

Amazon Elastic Block Store (EBS) volumes allow you to create encrypted launch configurations when creating EC2 instances and auto scaling. When the entire EBS volume is encrypted, data stored at rest on the volume, disk I/O, snapshots created from the volume, and data in-transit between EBS and EC2 are all encrypted.

How to Fix

Resource: AWS::AutoScaling::LaunchConfiguration

• Attribute: Properties.BlockDeviceMappings [source,go]

---

AutoScalingConfig: Type: AWS::AutoScaling::LaunchConfiguration Properties: ... BlockDeviceMappings:

• DeviceName: "/dev/sdk"
• Ebs: ...
• Encrypted: true
• DeviceName: "/dev/sdf" Ebs: ...
• Encrypted: false
• DeviceName: "/dev/sdc"
• VirtualName: ephermal

---