Medium
WorkSpaces
Regional
WorkSpaces user volumes should be encrypted at rest
FSBP
Description
This control checks whether a user volume in an Amazon WorkSpaces WorkSpace is encrypted at rest. The control fails if the WorkSpace user volume isn't encrypted at rest. Data at rest refers to data that's stored in persistent, non-volatile storage for any duration. Encrypting data at rest helps you protect its confidentiality, which reduces the risk that an unauthorized user can access it.
Remediation
To enable encryption at rest for WorkSpaces user volumes, configure the WorkSpace to use encrypted user volumes when creating or modifying the WorkSpace.
Steps
- Open the Amazon WorkSpaces console.
- Select the WorkSpace that needs user volume encryption enabled.
- If the WorkSpace is running, stop it first.
- Modify the WorkSpace configuration.
- Enable 'User volume encryption' in the WorkSpace settings.
- Save the configuration and restart the WorkSpace if needed.
- Verify that user volume encryption is enabled.
Compliance
FSBP