rspec/rules/S6332/python/rule.adoc

include::../description.adoc[]

include::../ask-yourself.adoc[]

include::../recommended.adoc[]

== Sensitive Code Example

For https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_efs.FileSystem.html[aws_cdk.aws_efs.FileSystem]
and https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_efs.CfnFileSystem.html[aws_cdk.aws_efs.CfnFileSystem]:

[source,python]
----
from aws_cdk import (
    aws_efs as efs
)

efs.FileSystem(
    self,
    "example",
    encrypted=False  # Sensitive
)
----

== Compliant Solution

For https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_efs.FileSystem.html[aws_cdk.aws_efs.FileSystem]
and https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_efs.CfnFileSystem.html[aws_cdk.aws_efs.CfnFileSystem]:

[source,python]
----
from aws_cdk import (
    aws_efs as efs
)

efs.FileSystem(
    self,
    "example",
    encrypted=True
)
----

include::../see.adoc[]

ifdef::env-github,rspecator-view[]

'''

== Implementation Specification
(visible only on this page)

=== Message

For FileSystem:

* Make sure that using unencrypted file systems is safe here.

For CfnFileSystem:

* Make sure that using unencrypted file systems is safe here.
* Omitting "encrypted" disables EFS encryption. Make sure it is safe here.


endif::env-github,rspecator-view[]