GSA / GSA/grace-cloudcustodian

SQS queue does not have Server Side Encryption enabled

Open
#23 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
HCL
Stars
8
Forks
12
PR merge metrics
No merged PRs in 30d

Description

The SQS queue used in this project does not have Encryption Enabled. This was reported when we ran Prowler against a development environment where this was deployed. This is not part of CIS, but we were hoping this could be resolved at some point.

Findings output:
```
Check if SQS queues have Server Side Encryption enabled (Not Scored) (Not part of CIS benchmark)
FAIL! us-east-1: SQS queue https://queue.amazonaws.com/*Cloud_Custodian_SQS is not using Server Side Encryption
```

Contributor guide

Open the contributing guide

Research direction

Search the HCL configuration for the SQS queue named Cloud_Custodian_SQS and identify how its encryption settings are represented. Validate the deployed queue with the Prowler check shown in the issue; done means the check no longer reports that queue as not using Server Side Encryption.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.