AWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK)

Description

This policy identifies Code Artifact Domains which are encrypted with default KMS keys and not with Keys managed by Customer. It is a best practice to use customer managed KMS Keys to encrypt your Code Artifact Domain data. It gives you full control over the encrypted data.

Code Example

resource "aws_codeartifact_domain" "pass" {
  domain         = "example"
  encryption_key = aws_kms_key.example.arn
  tags = {
    "key" = "value"
  }
}

Remediation

Terraform

Rule Details

Field	Value
ID	IAC-0269
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform
Checkov ID	CKV_AWS_221

References

• Checkov Rule

---