Ensure data stored in an S3 bucket is securely encrypted at rest
** org.openrewrite.terraform.aws.EnsureDataStoredInAnS3BucketIsSecurelyEncryptedAtRest** Ensure data stored in an S3 bucket is securely encrypted at rest.
Tags
- terraform
- AWS
- CKV_AWS_19
Source
- groupId: org.openrewrite.recipe
- artifactId: rewrite-terraform
- version: 1.6.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-terraform:1.6.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
activeRecipe("org.openrewrite.terraform.aws.EnsureDataStoredInAnS3BucketIsSecurelyEncryptedAtRest")
7
}
8
​
9
repositories {
10
mavenCentral()
11
}
12
​
13
dependencies {
14
rewrite("org.openrewrite.recipe:rewrite-terraform:1.6.0")
15
}
Copied!
pom.xml
1
<project>
2
<build>
3
<plugins>
4
<plugin>
5
<groupId>org.openrewrite.maven</groupId>
6
<artifactId>rewrite-maven-plugin</artifactId>
7
<version>4.25.0</version>
8
<configuration>
9
<activeRecipes>
10
<recipe>org.openrewrite.terraform.aws.EnsureDataStoredInAnS3BucketIsSecurelyEncryptedAtRest</recipe>
11
</activeRecipes>
12
</configuration>
13
<dependencies>
14
<dependency>
15
<groupId>org.openrewrite.recipe</groupId>
16
<artifactId>rewrite-terraform</artifactId>
17
<version>1.6.0</version>
18
</dependency>
19
</dependencies>
20
</plugin>
21
</plugins>
22
</build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument
-Drewrite.activeRecipesorg.openrewrite.terraform.aws.EnsureDataStoredInAnS3BucketIsSecurelyEncryptedAtRestDefinition
Recipe List
Yaml Recipe List
- resourceName:
aws_s3_bucket - content:
server_side_encryption_configuration { rule { apply_server_side_encryption_by_default { sse_algorithm = "AES256" } } }
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.terraform.aws.EnsureDataStoredInAnS3BucketIsSecurelyEncryptedAtRest
4
displayName: Ensure data stored in an S3 bucket is securely encrypted at rest
5
description: Ensure data stored in an S3 bucket is securely encrypted at rest.
6
tags:
7
- terraform
8
- AWS
9
- CKV_AWS_19
10
recipeList:
11
- org.openrewrite.terraform.AddConfiguration:
12
resourceName: aws_s3_bucket
13
content: server_side_encryption_configuration {
14
rule {
15
apply_server_side_encryption_by_default {
16
sse_algorithm = "AES256"
17
}
18
}
19
}
Copied!
Export as PDF
Copy link