Back to All Checks
Medium EC2 Regional

EC2 launch templates should enable encryption for attached EBS volumes

Description

Flags EC2 launch templates whose latest version defines block device mappings without enabling EBS encryption. Templates that launch unencrypted EBS volumes contradict at-rest encryption requirements.

Remediation

Create a new launch template version with Ebs.Encrypted=true on every block device mapping.

Steps

  1. Open the Amazon EC2 console and choose Launch templates.
  2. Select the template and choose Create a new template version.
  3. Under Storage (volumes), set Encrypted to True for every device.
  4. Save the new version and update consumers to use it.
Start Your Free Security Check