EC2 setting 'EBS encryption by default' should be enabled

문서 > Datadog 보안 > OOTB Rules > EC2 setting 'EBS encryption by default' should be enabled

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

Enabling the EC2 setting ‘EBS encryption by default’ ensures that all new block storage volumes and snapshots are automatically encrypted, providing data protection at rest. This setting helps to prevent inadvertent data exposure by eliminating the need for manual encryption configuration for each new volume. This aids in maintaining a consistent security posture and simplifies compliance with regulatory requirements for data protection. Note: This setting is configured at a per-account, per-region level.

Remediation

For guidance on enforcing encryption of new EBS volumes and snapshots, refer to the Enable Amazon EBS encryption by default section of the Amazon EBS User Guide.