All checks
Medium
AWS AppSync API caches should be encrypted at rest
Flags AWS AppSync API caches that are not configured for encryption at rest. Encrypting cached query results protects any sensitive data the cache may hold from disclosure if the underlying storage is accessed.
- service
- AppSync
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Encryption at rest can only be set when the cache is created. Re-create the cache with the at-rest encryption option enabled.
- In the AppSync console, open the affected GraphQL API and choose Caching.
- Delete the existing cache.
- Create a new cache and enable Encryption at rest before saving.
See which of your accounts this check is failing on.
Book a demo