Backup Vault is not encrypted at rest using KMS CMK

Description

TBD

Fix - Buildtime

Terraform

• Resource: aws_backup_vault
• Argument: kms_key_arn

resource "aws_backup_vault" "backup_with_kms_key" {
    ...
  + kms_key_arn = aws_kms_key.example.arn
}

CloudFormation

• Resource: AWS::Backup::BackupVault
• Argument: Properties.EncryptionKeyArn

Type: AWS::Backup::BackupVault
    Properties:
      ...
+     EncryptionKeyArn: example.arn/aws_kms_key