feat: Add require ebs encryption scp (#60)

cloudposse · Oct 1, 2024 · b0b9d7b · b0b9d7b
1 parent b4ff650
commit b0b9d7b
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/catalog/ec2-policies.yaml b/catalog/ec2-policies.yaml
@@ -294,3 +294,15 @@
  - false
  resources:
  - "*"
+
+- sid: "RequireEBSEncryption"
+ effect: "Deny"
+ actions:
+ - "ec2:CreateVolume"
+ condition:
+ - test: "Bool"
+ variable: "ec2:Encrypted"
+ values:
+ - false
+ resources:
+ - "*"