Evaluates whether system disks in ECS instance launch templates are encrypted. If all system disks are encrypted, the evaluation result is Compliant.
Scenarios
Encrypting system disks in ECS instance launch templates improves data security and reliability, and helps meet compliance requirements.
Risk level
Default risk level: medium.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
-
If all system disks in each ECS instance launch template are encrypted, the evaluation result is Compliant.
-
If a system disk in an ECS instance launch template is not encrypted, the evaluation result is Non-compliant.
Rule details
|
Parameter |
Description |
|
Rule name |
ecs-launch-template-version-system-disk-encrypted |
|
Rule identifier |
|
|
Tag |
Encrypted |
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration change |
|
Supported resource type |
ECS instance launch template |
|
Input parameter |
None |