Control: AWS > EC2 > Account Attributes > EBS Encryption by Default

Define the EBS Encryption by Default settings required for AWS > EC2 > Account Attributes.

Encryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.

The EBS Encryption by Default control compares the encryption settings against the encryption policies for the resource (AWS > EC2 > Account Attributes > EBS Encryption by Default > *), raises an alarm, and takes the defined enforcement action.

Resource Types

This control targets the following resource types:

AWS > EC2 > Account Attributes

Primary Policies

The following policies can be used to configure this control:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesEbsEncryptionByDefault

Category URI

tmod:@turbot/turbot#/control/categories/other

GraphQL

query controlType(id: "tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesEbsEncryptionByDefault") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesEbsEncryptionByDefault'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesEbsEncryptionByDefault"