EC2 Unencrypted Block Device

In the absence of encryption at rest, compromised data can be easily read. Block devices encryption at rest enhances data protection by safeguarding against unauthorised access to the underlying storage.

Remediation

Enable encryption on block devices. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#ebs-ephemeral-and-root-block-devices

Metadata

Severity: informational
Slug: ec2-unencrypted-block-device

CWEs

325: Missing Cryptographic Step

OWASP

A02:2021: Cryptographic Failures

Available Labs

Open Aws labs in SecDim Play for this vulnerability.

easy

EC2.aws

Other Easy AWS Signature

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

For Companies Play Now

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.