Plugin Title | EBS Encrypted Snapshots |
Cloud | AWS |
Category | EC2 |
Description | Ensures EBS snapshots are encrypted at rest |
More Info | EBS snapshots should have at-rest encryption enabled through AWS using KMS. If the volume was not encrypted and a snapshot was taken the snapshot will be unencrypted. |
AWS Link | https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html#encryption-support |
Recommended Action | Configure volume encryption and delete unencrypted EBS snapshots. |