OCI File Storage File Systems are not encrypted with a Customer Managed Key (CMK) misconfiguration d

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_15
Category - Subcategory	Storage - Encryption
Provider	ORACLE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

This rule identifies the OCI File Storage File Systems that are not encrypted with a Customer Managed Key (CMK). It is recommended that File Storage File Systems should be encrypted with a Customer Managed Key (CMK), using Customer Managed Key (CMK), provides an additional level of security on your data by allowing you to manage your own encryption key lifecycle management for the File System

How to Fix

Resource: oci_file_storage_file_system

• Arguments: kms_key_id [source,go]

---

resource "oci_file_storage_file_system" "pass" { ... kms_key_id = oci_kms_key.test_key.id ... }