All checks
Medium
AWS Glue machine learning transforms should be encrypted at rest
Verifies that AWS Glue machine learning transforms are encrypted at rest.
- service
- Glue
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To enable encryption at rest for your AWS Glue ML transform, you need to configure encryption settings in the transform parameters.
- Navigate to the AWS Glue console
- Go to 'Machine Learning' in the left navigation
- Select your ML transform
- Choose 'Edit' to modify the transform
- In the 'Parameters' section, configure encryption settings
- Set S3EncryptionMode to 'SSE-S3' or 'SSE-KMS'
- If using KMS, specify the KMS key ID
- Save the configuration to enable encryption at rest
See which of your accounts this check is failing on.
Book a demo