Fix RCOR_AWS_119: Ensure DynamoDB Tables are encrypted using a KMS Customer Managed CMK

[rapticore-cloud]

Severity

HIGH

Remediation

• Navigate to the DynamoDB service in the AWS Management Console
• Select the DynamoDB table specified in the CloudFormation template
• Click on the 'Actions' dropdown and select 'Edit'
• Under 'Encryption', select 'Enable encryption'
• Choose an existing KMS key or create a new one
• Apply the encryption settings
• Save the changes
• Update the CloudFormation template to include the KMS key in the DynamoDB table definition

Rationale

Encrypting DynamoDB tables using a KMS Customer Managed CMK ensures that your data is protected even if unauthorized access occurs to the underlying storage.