aws_sns_encryption

最近在 serverless 上，加上 cloud conformity的檢查，檢查後會出現 Rule ID: SNS-006 SNS Topic Encrypted 的 High level，就找了一下解法如下

可以執行的範例 serverless conf

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
provider:
  ...

custom:
  ...
  alerts:
    topics:
      ok:
        topic: sns-alerts-ok
        
      alarm:
        topic: sns-alerts-alarm
        
...

functions:
  ...

resources:
  - Resources:
      AwsAlertsOk: # Append the following properties to the resource created by the plugin serverless-plugin-aws-alerts
        Properties:
          KmsMasterKeyId: enter-your-cmk-id-here

      AwsAlertsAlarm: # Append the following properties to the resource created by the plugin serverless-plugin-aws-alerts
        Properties:
          KmsMasterKeyId: enter-your-cmk-id-here

Reference

Comments

2020-11-04
▲