All checks
Medium AppSync · regional

AWS AppSync API caches should be encrypted in transit

Flags AWS AppSync API caches that are not configured for encryption in transit. Without transit encryption, traffic between AppSync and its cache instances inside the AWS network is unencrypted.

service
AppSync
severity
Medium
scope
evaluated in every region

How to fix it

Encryption in transit can only be set when the cache is created. Re-create the cache with the in-transit encryption option enabled.

  1. In the AppSync console, open the affected GraphQL API and choose Caching.
  2. Delete the existing cache.
  3. Create a new cache and enable Encryption in transit before saving.

See which of your accounts this check is failing on.

Book a demo