DynamoDB Unencrypted At Rest
In the absence of encryption at rest, compromised data can be easily read. DynamoDB table encryption at rest enhances data protection by safeguarding against unauthorised access to the underlying storage.
Remediation
- Enable encryption at rest for DynamoDB. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dax_cluster#server_side_encryption
Metadata
- Severity: informational
- Slug: dynamodb-unencrypted-at-rest
CWEs
- 325: Missing Cryptographic Step
OWASP
- A02:2021: Cryptographic Failures
