54 lines
1.2 KiB
Plaintext
54 lines
1.2 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
For https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html[AWS::SQS::Queue]:
|
|
|
|
[source,yaml]
|
|
----
|
|
AWSTemplateFormatVersion: '2010-09-09'
|
|
Resources:
|
|
Queue:
|
|
Type: AWS::SQS::Queue
|
|
Properties:
|
|
DisplayName: "unencrypted_queue"
|
|
SqsManagedSseEnabled: false # Sensitive, encryption disabled
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
For https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html[AWS::SQS::Queue]:
|
|
|
|
[source,yaml]
|
|
----
|
|
AWSTemplateFormatVersion: '2010-09-09'
|
|
Resources:
|
|
Queue:
|
|
Type: AWS::SQS::Queue
|
|
Properties:
|
|
DisplayName: "encrypted_queue"
|
|
SqsManagedSseEnabled: true
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
=== Message
|
|
|
|
* Setting "SqsManagedSseEnabled" to "false" disables SQS queues encryption. Make sure it is safe here.
|
|
|
|
=== Highlighting
|
|
|
|
* Highlight the `SqsManagedSseEnabled` attribute if it is set to `false`.
|
|
|
|
endif::env-github,rspecator-view[] |