Medium
EMR
Regional
Amazon EMR security configurations should be encrypted at rest
NIST 800-53
Description
This control checks whether an Amazon EMR security configuration has encryption at rest enabled. The control fails if the security configuration doesn't enable encryption at rest. Data at rest refers to data that's stored in persistent, non-volatile storage for any duration. Encrypting data at rest helps you protect its confidentiality, which reduces the risk that an unauthorized user can access it.
Remediation
To enable encryption at rest for your EMR security configuration, you need to update the encryption settings.
Steps
- Navigate to the Amazon EMR console
- Go to 'Security configurations' in the left navigation
- Select your security configuration
- Choose 'Edit' to modify the configuration
- In the 'Encryption' section, enable 'Encryption at rest'
- Configure the encryption settings (KMS key, etc.)
- Save the configuration to apply encryption at rest
Compliance
NIST 800-53