S3 Bucket not Encrypted

Tenacity Id

Risk Level

Categories

s3-004

3

Last Updated:

April 21, 2022

An Amazon Simple Storage Service (S3) bucket has server-side encryption disabled. When default server-side encryption is disabled, objects in the S3 bucket are either unencrypted or must include encryption information in every request. Server-side encryption automatically encrypts every S3 object during the upload process. Enable S3 bucket server-side encrpytion for all S3 buckets.