EBS Default Encryption Disabled

• Query id: 3d3f6270-546b-443c-adb4-bb6fb2187ca6
• Query name: EBS Default Encryption Disabled
• Platform: Terraform
• Severity: High
• Category: Encryption
• CWE: 311
• URL: Github

Description

EBS Encryption should be enabled
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - tf file

resource "aws_ebs_encryption_by_default" "positive1" {
  enabled = false
}

Code samples without security vulnerabilities

Negative test num. 1 - tf file

resource "aws_ebs_encryption_by_default" "negative1" {
  enabled = true
}

resource "aws_ebs_encryption_by_default" "negative2" {

}