Ensure NAS File System is with KMS
Specifies whether to encrypt the file system. You can use keys that are hosted by Key Management Service (KMS) to encrypt data that is stored in the file system. When you read and write the encrypted data, you do not need to decrypt the data.
Risk Level: high
Platform: Alicloud
Spectral Rule ID: TFALCLD015
REMEDIATION
set encrypt_type
or encrypt_type
should not be '0'
- encrypt_type = "0"
+ encrypt_type = "1"
Read more:
Updated about 1 year ago