Control: AWS > Turbot > Encryption > KMS

Configure the set of resources in a Guardrails Stack per the AWS > Turbot > Encryption > Source > Source policy.

Guardrails Stacks are used to manage a set of resources via Terraform. Stacks are responsible for the creation and deletion of multiple resources, but once created, the resources are responsible for configuring themselves with their Configured control, using the Source from the parent stack.

The AWS > Turbot > Encryption > Source stack is responsible for configuring the kms key required for the encryption at rest.

Resource Types

This control targets the following resource types:

AWS > Region

Policies

The following policies can be used to configure this control:

AWS > Turbot > Encryption

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-kms#/control/types/encryptionKmsKey

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/aws-kms#/control/types/encryptionKmsKey") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-kms#/control/types/encryptionKmsKey'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-kms#/control/types/encryptionKmsKey"