Metadata

Id: 5f670f9d-b1b4-4c90-8618-2288f1ab9676

Cloud Provider: Alicloud

Platform: Terraform

Severity: High

Category: Encryption

Learn More

• Provider Reference

Description

NAS file system resources (alicloud_nas_file_system) must include the encrypt_type attribute set to "2" to enable user-managed KMS encryption. The rule reports a MissingAttribute issue when encrypt_type is absent, and an IncorrectValue issue when it is present but not set to "2". To remediate, ensure that encrypt_type is explicitly set to "2".

Compliant Code Examples

resource "alicloud_nas_file_system" "foo" {
  protocol_type = "NFS"
  storage_type  = "Performance"
  description   = "tf-testAccNasConfig"
  encrypt_type  = "2"
  kms_key_id = "1234abcd-12ab-34cd-56ef-1234567890ab"
}

Non-Compliant Code Examples

resource "alicloud_nas_file_system" "fooabr" {
  protocol_type = "NFS"
  storage_type  = "Performance"
  description   = "tf-testAccNasConfig"
  encrypt_type  = "0"
}

resource "alicloud_nas_file_system" "foo" {
  protocol_type = "NFS"
  storage_type  = "Performance"
  description   = "tf-testAccNasConfig"
}