Not all data stored in Aurora is securely encrypted at rest misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_96
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

This rule examines the resource aws_rds_cluster to check that encryption is set up. The property storage_encrypted is examined.

How to Fix

Resource: AWS::RDS::DBCluster

• Arguments: Properties.StorageEncrypted [source,go]

---

Resources: Aurora: Type: 'AWS::RDS::DBCluster' Properties: ... Engine: 'aurora'

• StorageEncrypted: true ...

---