Fix RCOR_AWS_173: Check encryption settings for Lambda environment variable

[rapticore-cloud]

Severity

HIGH

Remediation

• Navigate to the Lambda service in the AWS Management Console
• Select the Lambda function specified in the CloudFormation template
• Click on the 'Configuration' tab
• Under 'Environment variables', click on 'Edit'
• Ensure that sensitive environment variables are encrypted using AWS KMS
• Save the changes
• Update the CloudFormation template to include the encryption settings

Rationale

Encrypting Lambda environment variables using AWS KMS adds an additional layer of security, protecting sensitive information such as API keys, database credentials, and other confidential data from unauthorized access.