Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: check that EC2 Instance types support network-level encryption #1631

Open
rdegraaf-ncc3 opened this issue May 3, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@rdegraaf-ncc3
Copy link
Contributor

AWS does not necessarily encrypt data in transit between EC2 Instances and there are no settings on VPCs, Network Interfaces, Subnets, or other networking components to control encryption. Rather, encryption is always performed transparently between certain Instance types and not performed otherwise. More details, including the current set of Instance types that support network encryption, are available at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit.

ScoutSuite should have a check that identifies EC2 Instances that do not support network-level encryption.

@rdegraaf-ncc3 rdegraaf-ncc3 added the enhancement New feature or request label May 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant