[Snyk] SNS Topic Encryption - Githubissues

GSA-TTS / datagov-brokerpak-solr

An OSBAPI brokerpak that supplies services needed by the datagov team

Other

8 stars 5 forks source link

[Snyk] SNS Topic Encryption #76

Open nickumia-reisys opened 1 year ago

nickumia-reisys commented 1 year ago

Date of report: 12/06/2022 Severity: Moderate and Low

[ ] Non-Encrypted SNS Topic (Moderate)
- Detailed paths
- Path: terraform/ecs/provision/cloudwatch.tf
- Introduced through: resource › aws_sns_topic[solr_memory_updates] › kms_master_key_id
- This issue is...
- The SNS topic is not encrypted at rest
- The impact of this is...
- That should someone gain unauthorized access to the data they would be able to read the contents.
- You can resolve it by...
- Set kms_master_key_id attribute to KMS key
[ ] SNS topic is not encrypted with customer managed key (Low)
- Detailed paths
- Introduced through: resource › aws_sns_topic[solr_memory_updates] › kms_master_key_id
- This issue is...
- SNS topic is not encrypted with customer managed key
- The impact of this is...
- Scope of use of the encryption key cannot be controlled via KMS/IAM policies
- You can resolve it by...
- Set kms_master_key_id attribute to a customer managed key id