SNS Topics Should Be Encrypted Using KMS CMKs

​

More Info:

SNS Topics should be encrypted with Customer managed keys (CMK) instead of AWS managed keys in order to have a more granular control over the SNS data-at-rest encryption and decryption process.

​

Risk Level

High

​

Address

Security

​

Compliance Standards

CBP, GDPR, APRA, MAS, NIST

​

Additional Reading:

• https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html