Control: 4.1 Ensure that 'Unattached disks' are encrypted
Description
Ensure that unattached disks in a subscription are encrypted.
Remediation
From Console
- Logon to ECS Console.
- In the left-side navigation pane, choose
Storage & Snapshots > Disk. - In the upper-right corner of the
Diskspage, clickCreate Disk. - In the
Disksection, check theDisk Encryptionbox and then select a key from the drop-down list.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_4_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_4_1 --shareSQL
This control uses a named query:
select arn as resource, case when encrypted then 'ok' else 'alarm' end as status, case when encrypted then title || ' encryption enabled.' else title || ' encryption disabled.' end as reason , account_id as account_id, region as regionfrom alicloud_ecs_diskwhere status = 'Available';