Athena Workgroup is not encrypted
Description
Athena workgroups support full server-side encryption for all data at rest which should be enabled.
Fix - Buildtime
Terraform
- Resource: aws_athena_workgroup
- Argument: result_configuration.encryption_configuration
go aws_s3_bucket.test.tf
resource "aws_athena_workgroup" "test" {
...
+ configuration {
...
+ result_configuration {
+ output_location = "s3://mys3bucket"
+ encryption_configuration {
+ encryption_option = "SSE_KMS"
+ kms_key_arn = "mykmsarn"
}
}
}
}