Rule: DynamoDB Table Encrypted with AWS KMS

Rule Description:

Troubleshooting Steps:

2. 1.
   Check if the DynamoDB table is using encryption.
4. 2.
   Verify if AWS KMS key is used for encrypting the DynamoDB table.
6. 3.
   Ensure that the KMS key used is compliant with the CISA Cyber Essentials requirements.
8. 4.
   Confirm if the correct permissions are assigned to the KMS key and the DynamoDB table.

Necessary Code:

aws dynamodb update-table \
    --table-name <table-name> \
    --sse-specification 'Enabled=true, SSEType=KMS, KMSMasterKeyId=<kms-key-id>'

Step-by-Step Guide:

2. 1.
   Open the AWS Management Console and navigate to the DynamoDB service.
4. 2.
   Select the desired DynamoDB table that needs to be encrypted.
6. 3.
   Click on the "Actions" drop-down menu and choose "Manage encryption".
8. 4.
   In the Encryption configuration section, click on "Edit".
10. 5.
    Select the "AWS Key Management Service (KMS)" option.
12. 6.
    Choose the appropriate KMS key from the "KMS Key ARN" drop-down list.
14. 7.
    Click on "Save changes" to enable encryption using the selected KMS key.

Note:

<table-name>

<kms-key-id>