Other Articles

DynamoDB Table – Enable Table Encryption

This check ensures that server-side encryption is enabled for Amazon DynamoDB tables. Encryption protects sensitive data at rest and helps meet security and compliance requirements.

Check Details

  • Resource: DynamoDB Table
  • Check: Enable DynamoDB table encryption
  • Risk: Unencrypted data at rest may be exposed if compromised

Remediation via AWS Console

  1. Log in to the AWS Management Console and open the Amazon DynamoDB console. Amazon DynamoDB Console
  2. In the left navigation pane, click Tables and select the affected DynamoDB table.
  3. Open the Settings tab and scroll down to the Encryption section.
  4. Click Edit.
  5. Enable encryption and choose the encryption type:
    • AWS owned key (default and simplest)
      • DynamoDB encryption enabled
  6. Click Save changes.

Remediation via AWS CLI

  1. Log in to the AWS Management Console and click the CloudShell icon (>_) in the top-right corner. AWS CloudShell
  2. Enable encryption on the existing DynamoDB table: 
    

aws dynamodb update-table \
 --table-name <table-name> \
 --sse-specification Enabled=true

Replace <table-name> with the name of your DynamoDB table.