Back to All Checks
Medium AppSync Regional

AWS AppSync API caches should be encrypted at rest

Description

Flags AWS AppSync API caches that are not configured for encryption at rest. Encrypting cached query results protects any sensitive data the cache may hold from disclosure if the underlying storage is accessed.

Remediation

Encryption at rest can only be set when the cache is created. Re-create the cache with the at-rest encryption option enabled.

Steps

  1. In the AppSync console, open the affected GraphQL API and choose Caching.
  2. Delete the existing cache.
  3. Create a new cache and enable Encryption at rest before saving.
Start Your Free Security Check