Medium WorkSpaces Regional

WorkSpaces user volumes should be encrypted at rest

FSBP

Description

Verifies that WorkSpaces user volumes are encrypted at rest.


Remediation

To enable encryption at rest for WorkSpaces user volumes, configure the WorkSpace to use encrypted user volumes.

Steps

  1. Open the Amazon WorkSpaces console.
  2. Select the WorkSpace that needs user volume encryption enabled.
  3. Stop the WorkSpace if it's running.
  4. Modify the WorkSpace configuration.
  5. Enable 'User volume encryption' in the WorkSpace settings.
  6. Save the configuration and restart the WorkSpace if needed.

Compliance

FSBP