All checks
Medium EMR · regional

Amazon EMR security configurations should have encryption at rest enabled

Verifies that EMR security configurations have encryption at rest enabled.

service
EMR
severity
Medium
scope
evaluated in every region

How to fix it

To enable encryption at rest for your EMR security configuration, you need to update the encryption settings.

  1. Navigate to the Amazon EMR console
  2. Go to 'Security configurations' in the left navigation
  3. Select your security configuration
  4. Choose 'Edit' to modify the configuration
  5. In the 'Encryption' section, enable 'Encryption at rest'
  6. Configure the encryption settings (KMS key, etc.)
  7. Save the configuration to apply encryption at rest

See which of your accounts this check is failing on.

Book a demo