AWS Glue security configuration encryption is not enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_99
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Ensure that AWS Glue has encryption enabled. AWS glue has three possible components that could be encrypted: Cloudwatch, job bookmarks and S3 buckets. This check ensures that each is set correctly.

How to Fix

[source,go]

Resources: Resource0: Type: AWS::Glue::SecurityConfiguration Properties: ... EncryptionConfiguration: CloudWatchEncryption:

• CloudWatchEncryptionMode: SSE-KMS #any value but 'DISABLED' ... JobBookmarksEncryption:
• JobBookmarksEncryptionMode: CSE-KMS #any value but 'DISABLED' ... S3Encryptions:
• S3EncryptionMode: SSE-KMS #any value but 'DISABLED' ...s

---