Skip to main content

Configure AWS Kinesis Streams should be encrypted

  1. Configure AWS Kinesis Streams should be encrypted
  2. Use Case for AWS Kinesis Streams should be encrypted
  3. Triage Guides by Violation Type
    1. Triage AWS Kinesis Streams should be encrypted ENCRYPTION_NOT_ENABLED

How do I enable this policy?​

Signature:
  Type: Pyrae::Policy::PolicyDocument::Signatory
  Properties:
    SignatureTeamUrn: { "PyRef": "PyraeTeam" }
    PolicyUrn: "urn:pyrae:policy:us-west-2:sAutx4ZxiqTJUzJdvky2km:policy/kinesisStreamEncryptionPolicy"

What permissions does this policy require in my AWS account?​

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "dynamodb:DescribeStream"
      ],
      "Resource": "*"
    }
  ]
}

What resources match this policy?​

Type: Pyrae::Observer::MatchingRule
Properties:
  MatchAccountType: aws
  MatchUrnService: dynamodb
  MatchUrnResourceType: table