Aqua CSPM

XRay Encryption Enabled

Quick Info

Plugin TitleXRay Encryption Enabled
CloudAWS
CategoryXRay
DescriptionEnsures CMK-based encryption is enabled for XRay traces.
More InfoAWS XRay supports default encryption based on an AWS-managed KMS key as well as encryption using a customer managed key (CMK). For maximum security, the CMK-based encryption should be used.
AWS Linkhttps://docs.aws.amazon.com/xray/latest/devguide/xray-console-encryption.html
Recommended ActionUpdate XRay encryption configuration to use a CMK.

Detailed Remediation Steps