Medium
Glue
Regional
AWS Glue machine learning transforms should be encrypted at rest
FSBP
Description
Verifies that AWS Glue machine learning transforms are encrypted at rest.
Remediation
To enable encryption at rest for your AWS Glue ML transform, you need to configure encryption settings in the transform parameters.
Steps
- Navigate to the AWS Glue console
- Go to 'Machine Learning' in the left navigation
- Select your ML transform
- Choose 'Edit' to modify the transform
- In the 'Parameters' section, configure encryption settings
- Set S3EncryptionMode to 'SSE-S3' or 'SSE-KMS'
- If using KMS, specify the KMS key ID
- Save the configuration to enable encryption at rest
Compliance
FSBP