Unencrypted unattached disk - Complete Cloud Security in Minutes - Orca Security

Data protection

Unencrypted unattached disk

Risk Level

Hazardous (3)

Platform(s)

Compliance Frameworks

AliCloud CIS

Description

Alibaba Cloud ECS data disks contain application-level data. This means that they may contain private data. Alibaba Cloud ECS provides the option to of disk encryption, which your data. We have found that the disk {AliCloudEcsDisk} is not encrypted. More information on encryption can be found at: https://www.alibabacloud.com/help/doc-detail/59643.htm

Recommended Mitigation

You should encrypt data disks on creation. Although there is no direct way to encrypt an unecrypted disk, you can copy the data to a new encrypted disk. Read more: https://www.alibabacloud.com/help/doc-detail/107972.htm

See Orca in action

See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.