aws-samples / aws-samples/aws-security-reference-architecture-examples
[FEATURE] Enabling Encryption with the SRA
- Dominant language
- Python
- Stars
- 1.2k
- Forks
- 303
- Avg merge
- 3d 9h
- Merged PRs (30d)
- 1
Description
**Community Note**
- Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment
### Is your feature request related to a problem? Please describe
- Currently, SRA is using SSM parameters for non-sensitive data (e.g., Organization ID, Management Account ID). Having the SSM parameters encrypted, or an option during the deployment would be nice.
- A Customer has a control that requires all SSM parameters to be encrypted by their CMK.
### Describe the solution you'd like
- Implement SSM parameters encrypted despite whether they have sensitive data. Preferably, provide an option for customer to provide the CMK to be used.
- Also, ok with moving to Secrets Manager for encrypted secrets, if that is easier.
Contributor guide
Assessment
This issue has not been assessed yet.