Fix RCOR_AWS_158: Ensure that CloudWatch Log Group is encrypted by KMS

[rapticore-cloud]

Severity

MEDIUM

Remediation

• Navigate to the CloudWatch service in the AWS Management Console
• Select the Log Group specified in the YAML file
• Click on 'Actions' and select 'Encrypt'
• Choose an existing KMS key or create a new one
• Save the changes
• Update the YAML file to include the KMS key in the Log Group resource definition

Rationale

Encrypting CloudWatch Log Groups using AWS Key Management Service (KMS) ensures that log data is protected at rest. This adds an additional layer of security to your log data, protecting sensitive information from unauthorized access and meeting compliance requirements.