Description

Detects AWS EBS volumes that are not using encryption at rest. Unencrypted EBS volumes pose a security risk as sensitive data stored on these volumes could be exposed if the physical storage is compromised or improperly decommissioned.

Detection Strategy

• Scans all EBS volumes in the specified AWS region

• Checks the 'Encrypted' attribute of each EBS volume

• Reports a vulnerability if an EBS volume has encryption disabled (Encrypted=False)