cloud-report
Version:
Collects and analyzes cloud resources
45 lines (44 loc) • 2.15 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const types_1 = require("../../../types");
const utils_1 = require("../../../utils");
const base_1 = require("../../base");
class VolumesEncryptionEnabledAnalyzer extends base_1.BaseAnalyzer {
analyze(params, fullReport) {
const allVolumes = params.volumes;
if (!allVolumes) {
return undefined;
}
const volumes_encrypted_at_rest = { type: types_1.CheckAnalysisType.Security };
volumes_encrypted_at_rest.what = "Are EBS volumes encrypted at rest?";
volumes_encrypted_at_rest.why = "Data at rest should always be encrypted";
volumes_encrypted_at_rest.recommendation = "Recommended to enable encryption for EBS volumes";
volumes_encrypted_at_rest.benchmark = ['all', 'hipaa'];
const allRegionsAnalysis = {};
for (const region in allVolumes) {
const regionVolumes = allVolumes[region];
allRegionsAnalysis[region] = [];
for (const volume of regionVolumes) {
const volumeAnalysis = {};
volumeAnalysis.resource = volume;
volumeAnalysis.resourceSummary = {
name: "Volume",
value: `${utils_1.ResourceUtil.getNameByTags(volume)} | ${volume.VolumeId}`,
};
if (volume.Encrypted) {
volumeAnalysis.severity = types_1.SeverityStatus.Good;
volumeAnalysis.message = "Encryption enabled";
}
else {
volumeAnalysis.severity = types_1.SeverityStatus.Warning;
volumeAnalysis.message = "Encryption not enabled";
volumeAnalysis.action = "Enable encryption at rest";
}
allRegionsAnalysis[region].push(volumeAnalysis);
}
}
volumes_encrypted_at_rest.regions = allRegionsAnalysis;
return { volumes_encrypted_at_rest };
}
}
exports.VolumesEncryptionEnabledAnalyzer = VolumesEncryptionEnabledAnalyzer;