hlxsites / hlxsites/prisma-cloud-docs

CSEK not supported by Pub/Sub

Open
#640 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
21
Forks
92
PR merge metrics
No merged PRs in 30d

Description

**Checkov** check on a Pub/Sub resource says:

> Ensure PubSub Topics are encrypted with Customer Supplied Encryption Keys (CSEK).

The link provided in the guide (https://github.com/hlxsites/prisma-cloud-docs/blob/main/docs/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-pubsub-topics-are-encrypted-with-customer-supplied-encryption-keys-csek.adoc) gives the solution to using the kms_key_name variable.

I think there are 2 problems:
1) CSEK is not supported by Pub/Sub, but only by Google Cloud Storage and Google Compute Engine (https://cloud.google.com/docs/security/encryption/customer-supplied-encryption-keys)
2) The tested module is already using the kms_key_name variable

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.