Aws Instance Encryption Disabled
Description
Detects AWS Neptune database instances that are not configured with encryption at rest enabled. Unencrypted Neptune database instances can expose sensitive graph data to unauthorized access if the underlying storage is compromised.
Detection Strategy
• Checks Neptune database instances in the specified AWS region
• Reports a vulnerability if a Neptune instance has StorageEncrypted set to false
• Only evaluates instances where the StorageEncrypted parameter is explicitly defined
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, fill out this contact form.