[Snyk] CloudWatch log group not encrypted with managed key - Githubissues

GSA-TTS / datagov-brokerpak-solr

An OSBAPI brokerpak that supplies services needed by the datagov team

Other

8 stars 5 forks source link

[Snyk] CloudWatch log group not encrypted with managed key #80

Open nickumia-reisys opened 1 year ago

nickumia-reisys commented 1 year ago

Date of report: 12/06/2022 Severity: Low

[ ] CloudWatch log group not encrypted with managed key (Low)
- Detailed paths
- Path: terraform/ecs/provision/logging.tf
- Introduced through: resource › aws_cloudwatch_log_group[ecs-logs] › kms_key_id
- This issue is...
- Log group is not encrypted with customer managed key
- The impact of this is...
- Scope of use of the key cannot be controlled via KMS/IAM policies
- You can resolve it by...
- Set kms_key_id attribute with customer managed key id
[ ] CloudWatch log group not encrypted with managed key (Low)
- Detailed paths
- Path: terraform/ecs/provision/restarts.tf
- Introduced through: resource › aws_cloudwatch_log_group[lambda-restarts] › kms_key_id
- This issue is...
- Log group is not encrypted with customer managed key
- The impact of this is...
- Scope of use of the key cannot be controlled via KMS/IAM policies
- You can resolve it by...
- Set kms_key_id attribute with customer managed key id