Glue Data Catalog encryption is not enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_94
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

This examines the resource aws_glue_data_catalog_encryption_settings and checks that encryption is set up. The properties encrypted_at_rest and connection_encrypted in the blocks connection_password_encryption and encryption_at_rest are examined.

How to Fix

Resource AWS::Glue::DataCatalogEncryptionSettings

• Arguments Properties.DataCatalogEncryptionSettings [source,go]

---

Resources: Example: Type: 'AWS::Glue::DataCatalogEncryptionSettings' Properties: ... DataCatalogEncryptionSettings: ConnectionPasswordEncryption: ...

• ReturnConnectionPasswordEncrypted: True EncryptionAtRest: ...
• CatalogEncryptionMode: "SSE-KMS"

---