search

answerdigital / terraform-modules

The repo for the infrastructure as code
MIT License
3 stars 4 forks source link

Secret explicitly uses the default key. #21

Open robg-test opened 1 year ago

robg-test commented 1 year ago

https://aquasecurity.github.io/tfsec/v1.28.1/checks/aws/ssm/secret-use-customer-key/

robg-test commented 1 year ago

Has cost, and is a low impact issue - Going to ignore this one.

robg-test commented 1 year ago

FIxed in #24 Note this needs to also possibly enable the key for the RDS database too.

We'll need to encrypt storage in the DB for this first - See #19

robg-test commented 1 year ago

24 abandoned. deal with #19 first