aws / aws/aws-cdk

(aws-sqs): default encryption of `SSE-SQS` is not explicitly set

Open Beginner friendly
#24,993 5 comments 0 reactions 0 assignees View on GitHub
@aws-cdk/aws-sqs bug effort/small p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the bug

Right now, an SQS Queue [has `SQS_MANAGED (SSE-SQS)` enabled by default](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_sqs.Queue.html#encryption). This, however, is [implicit](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-sqs/lib/queue.ts#L399) and should be explicit, setting the same properties as if `SQS_MANAGED` was [explicitly set](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-sqs/lib/queue.ts#L434).

### Expected Behavior

I expect the default Queue to create a CFN Resource with the the following property: `sqsManagedSseEnabled: true`

### Current Behavior

There is no `sqsManagedSseEnabled: true` property set, instead it assumes SSE-SQS is enabled *at the region*.

### Reproduction Steps

Create a SQS queue and examine its CFN output.

### Possible Solution

_No response_

### Additional Information/Context

_No response_

### CDK CLI Version

2.70

### Framework Version

_No response_

### Node.js Version

16.3.0

### OS

Mac

### Language

Python

### Language Version

_No response_

### Other information

_No response_

Contributor guide

Open the contributing guide

Research direction

Read packages/aws-cdk-lib/aws-sqs/lib/queue.ts at the linked lines, comparing the default encryption path with the explicit SQS_MANAGED path. Reproduce the issue by synthesizing a default SQS Queue and inspecting its CloudFormation output; done means the output includes sqsManagedSseEnabled: true.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
78/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.