50 lines
1.0 KiB
Plaintext
50 lines
1.0 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
For https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html[AWS::SQS::Queue]:
|
|
|
|
[source,cloudformation]
|
|
----
|
|
AWSTemplateFormatVersion: '2010-09-09'
|
|
Resources:
|
|
Queue: # Sensitive, encryption disabled by default
|
|
Type: AWS::SQS::Queue
|
|
Properties:
|
|
DisplayName: "unencrypted_queue"
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
For https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html[AWS::SQS::Queue]:
|
|
|
|
[source,cloudformation]
|
|
----
|
|
AWSTemplateFormatVersion: '2010-09-09'
|
|
Resources:
|
|
Queue:
|
|
Type: AWS::SQS::Queue
|
|
Properties:
|
|
DisplayName: "encrypted_queue"
|
|
KmsMasterKeyId:
|
|
Fn::GetAtt:
|
|
- TestKey
|
|
- KeyId
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::message.adoc[]
|
|
|
|
endif::env-github,rspecator-view[] |