Ensure AWS Kinesis Firehose's delivery stream is encrypted

Error: Ensure AWS Kinesis Firehose's delivery stream is encrypted

Bridgecrew Policy ID: BC_AWS_GENERAL_154
Checkov Check ID: CKV_AWS_240
Severity: LOW

Ensure AWS Kinesis Firehose's delivery stream is encrypted

Description

As a best practice enable encryption for your AWS Kinesis Firehose's delivery stream to improve data security without making changes to your business or applications.

Fix - Runtime

Fix - Buildtime

Terraform

resource "aws_kinesis_firehose_delivery_stream" "pass" {
  name        = "terraform-kinesis-firehose-test-stream"
  destination = "s3"

  s3_configuration {
    role_arn   = aws_iam_role.firehose_role.arn
    bucket_arn = aws_s3_bucket.bucket.arn
  }

  server_side_encryption {
    enabled = true #default is false
  }
  tags = {
    test = "failed"
  }
}