feat: Add require ebs encryption scp (#60)

cloudposse · Oct 1, 2024 · b0b9d7b · b0b9d7b
1 parent b4ff650
commit b0b9d7b
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/catalog/ec2-policies.yaml b/catalog/ec2-policies.yaml
@@ -294,3 +294,15 @@
         - false
   resources:
     - "*"
+
+- sid: "RequireEBSEncryption"
+  effect: "Deny"
+  actions:
+    - "ec2:CreateVolume"
+  condition:
+    - test: "Bool"
+      variable: "ec2:Encrypted"
+      values:
+        - false
+  resources:
+    - "*"