Aws Catalog Encryption Disabled
Description
Detects when an AWS Glue Data Catalog has encryption at rest disabled while containing databases. An unencrypted Glue Data Catalog can expose sensitive metadata about your data assets, table definitions, and ETL jobs to unauthorized access.
Detection Strategy
• Checks if there are any databases present in the AWS Glue Data Catalog
• Verifies the encryption settings of the Data Catalog by examining the CatalogEncryptionMode
• Reports a vulnerability if both conditions are true: databases exist in the catalog AND encryption mode is set to 'DISABLED'
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.