Plugin Title EBS Encrypted Snapshots
Cloud AWS
Category EC2
Description Ensures EBS snapshots are encrypted at rest
More Info EBS snapshots should have at-rest encryption enabled through AWS using KMS. If the volume was not encrypted and a snapshot was taken the snapshot will be unencrypted.
AWS Link
Recommended Action Configure volume encryption and delete unencrypted EBS snapshots.

Detailed Remediation Steps

Want to scan for this risk automatically?

Get Started Now