aws-samples / aws-samples/aws-security-reference-architecture-examples

[FEATURE] Enabling Encryption with the SRA

Open
#104 0 comments 5 reactions 0 assignees View on GitHub
feature
Dominant language
Python
Stars
1.2k
Forks
303
Avg merge
3d 9h
Merged PRs (30d)
1

Description

**Community Note**

- Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment

### Is your feature request related to a problem? Please describe

- Currently, SRA is using SSM parameters for non-sensitive data (e.g., Organization ID, Management Account ID). Having the SSM parameters encrypted, or an option during the deployment would be nice.

- A Customer has a control that requires all SSM parameters to be encrypted by their CMK.

### Describe the solution you'd like

- Implement SSM parameters encrypted despite whether they have sensitive data. Preferably, provide an option for customer to provide the CMK to be used.

- Also, ok with moving to Secrets Manager for encrypted secrets, if that is easier.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.