HIGH
Source
Trivy
ID
AVD-AWS-0136

SNS topic not encrypted with CMK.

Topics should be encrypted with customer managed KMS keys and not default AWS managed keys, in order to allow granular key management.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Use a CMK for SNS Topic encryption

1
2
3
4
5
6
Resources:
  GoodTopic:
    Type: AWS::SQS::Topic
    Properties:
      KmsMasterKeyId: some-key
      TopicName: blah

Use a CMK for SNS Topic encryption

1
2
3
resource "aws_sns_topic" "good_example" {
  kms_master_key_id = "/blah"
}