Skip to content

Ensure Basic Block storage is encrypted.

Description

This policy checks whether basic block storage is encrypted in launch configurations. Encryption is crucial for protecting sensitive data at rest, and unencrypted storage can lead to data breaches. By ensuring that block storage is encrypted, organizations can significantly reduce the risk of data exposure. This check is particularly important for compliance with various regulatory standards that require data encryption.

Code Example

terraform
resource "ncloud_launch_configuration" "example" {
  is_encrypted_volume = true
}

Remediation

Enable encryption for the block storage volume in the launch configuration.

Rule Details

FieldValue
IDIAC-1210
SeverityHIGH
IaC TypeTerraform
Frameworksncloud_launch_configuration
Checkov IDCKV_NCP_7

References