Skip to content

enable-table-encryption

Explanation

Encryption should be enabled at all available levels to ensure that data is protected if compromised.

Possible Impact

Data stored in the table that is unencrypted may be vulnerable to compromise

Suggested Resolution

Enable server side encryption

Insecure Example

The following example will fail the AVD-AWS-0121 check.

---
AWSTemplateFormatVersion: 2010-09-09
Description: Bad Example of SAM Table
Resources:
  BadFunction:
    Type: AWS::Serverless::SimpleTable
    Properties:
      TableName: Bad Table
      SSESpecification:
        SSEEnabled: false

Secure Example

The following example will pass the AVD-AWS-0121 check.

---
AWSTemplateFormatVersion: 2010-09-09
Description: Good Example of SAM Table
Resources:
  GoodFunction:
    Type: AWS::Serverless::SimpleTable
    Properties:
      TableName: GoodTable
      SSESpecification:
        SSEEnabled: true