Checks if Amazon DynamoDB table is encrypted with AWS Key Management Service (KMS). The rule is NON_COMPLIANT if Amazon DynamoDB table is not encrypted with AWS KMS. The rule is also NON_COMPLIANT if the encrypted AWS KMS key is not present in kmsKeyArns
input parameter.
Identifier: DYNAMODB_TABLE_ENCRYPTED_KMS
Resource Types: AWS::DynamoDB::Table
Trigger type: Configuration changes
AWS Region: All supported AWS regions except Asia Pacific (Taipei) Region
Parameters:
Comma separated list of AWS KMS key ARNs allowed for encrypting Amazon DynamoDB Tables.
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
dynamodb-table-deletion-protection-enabled
dynamodb-table-encryption-enabled
Did this page help you? - Yes
Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
Did this page help you? - No
Thanks for letting us know this page needs work. We're sorry we let you down.
If you've got a moment, please tell us how we can make the documentation better.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4