<  Back to rules search

EBS volume is encrypted

ebs

Classification:

compliance

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

Enable encryption for Elastic Block Store (EBS).

Rationale

AES-256 encryption, used by EBS, protects data stored on volumes, disk I/O, and the snapshots created from a volume to protect your sensitive data from exploits and unauthorized users.

Remediation

Console

Follow the EBS encryption docs to learn about the requirements and methods for enabling encryption in the AWS Console.

CLI

  1. Run enable-ebs-encryption-by-default to enable encryption for your account in the current region.

  2. Run get-ebs-encryption-by-default to confirm encryption is enabled.

See the Set encryption defaults using the API and CLI docs for additional commands related to EBS encryption.