Skip to content

Ensure NAS is securely encrypted

Description

This policy checks whether encryption is enabled for NAS volumes. Encryption is crucial for protecting sensitive data stored on NAS volumes from unauthorized access. Without encryption, data can be easily accessed and exploited by malicious actors, leading to data breaches and other security incidents. Enabling encryption ensures that data is protected both at rest and in transit.

Code Example

terraform
resource "ncloud_nas_volume" "example" {
  is_encrypted_volume = true
}

Remediation

Enable encryption for the NAS volume by setting the 'is_encrypted_volume' attribute to 'true'.

Rule Details

FieldValue
IDIAC-1217
SeverityHIGH
IaC TypeTerraform
Frameworksncloud_nas_volume
Checkov IDCKV_NCP_14

References