hlxsites / hlxsites/prisma-cloud-docs
CSEK not supported by Pub/Sub
- Dominant language
- JavaScript
- Stars
- 21
- Forks
- 92
- PR merge metrics
- No merged PRs in 30d
Description
**Checkov** check on a Pub/Sub resource says:
> Ensure PubSub Topics are encrypted with Customer Supplied Encryption Keys (CSEK).
The link provided in the guide (https://github.com/hlxsites/prisma-cloud-docs/blob/main/docs/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-pubsub-topics-are-encrypted-with-customer-supplied-encryption-keys-csek.adoc) gives the solution to using the kms_key_name variable.
I think there are 2 problems:
1) CSEK is not supported by Pub/Sub, but only by Google Cloud Storage and Google Compute Engine (https://cloud.google.com/docs/security/encryption/customer-supplied-encryption-keys)
2) The tested module is already using the kms_key_name variable
Contributor guide
Assessment
This issue has not been assessed yet.