DynamoDB tables should use KMS encryption

이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

DynamoDB tables should have encryption at rest enabled. All DynamoDB tables are encrypted by default using an AWS owned key. AWS managed KMS keys and customer managed KMS keys are also supported. This rule verifies that encryption at rest is not explicitly disabled.

Remediation

Ensure encryption at rest is enabled on the table. AWS owned keys (the default), AWS managed KMS keys, and customer managed KMS keys are all acceptable. For guidance, see DynamoDB encryption at rest.