Medium
AppSync
Regional
AWS AppSync API caches should be encrypted in transit
Description
Flags AWS AppSync API caches that are not configured for encryption in transit. Without transit encryption, traffic between AppSync and its cache instances inside the AWS network is unencrypted.
Remediation
Encryption in transit can only be set when the cache is created. Re-create the cache with the in-transit encryption option enabled.
Steps
- In the AppSync console, open the affected GraphQL API and choose Caching.
- Delete the existing cache.
- Create a new cache and enable Encryption in transit before saving.