Data protection

Unencrypted unattached disk

Risk Level

Hazardous (3)

Platform(s)
Compliance Frameworks

Description

Alibaba Cloud ECS data disks contain application-level data. This means that they may contain private data. Alibaba Cloud ECS provides the option to of disk encryption, which your data. We have found that the disk {AliCloudEcsDisk} is not encrypted. More information on encryption can be found at: https://www.alibabacloud.com/help/doc-detail/59643.htm
  • Recommended Mitigation

    Since there is no direct way to encrypt an unencrypted disk, you should encrypt data disks on creation.