Aqua CSPM

CSEK Encryption Enabled

Quick Info

Plugin TitleCSEK Encryption Enabled
CloudGOOGLE
CategoryCompute
DescriptionEnsures Customer Supplied Encryption Key Encryption is enabled on disks
More InfoGoogle encrypts all disks at rest by default. By using CSEK only the users with the key can access the disk. Anyone else, including Google, cannot access the disk data.
GOOGLE Linkhttps://cloud.google.com/compute/docs/disks/customer-supplied-encryption
Recommended ActionCSEK can only be configured when creating a disk. Delete the disk and redeploy with CSEK.

Detailed Remediation Steps