Evaluates whether all data disks in each ECS instance launch template are encrypted. If all data disks are encrypted, the evaluation result is Compliant.
Scenarios
Encrypting data disks in an ECS instance launch template improves data security and reliability, and helps meet compliance requirements.
Risk level
Default risk level: medium.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
-
If all data disks in each ECS instance launch template are encrypted, the evaluation result is Compliant.
-
If a data disk in an ECS instance launch template is not encrypted, the evaluation result is Non-compliant.
Rule details
|
Parameter |
Description |
|
Rule name |
ecs-launch-template-version-data-disk-encrypted |
|
Rule identifier |
|
|
Tag |
Encrypted |
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration change |
|
Supported resource type |
ECS instance launch template |
|
Input parameter |
None |