Skip to main content

NAS file system encryption configured

ID: rule:aliyun:nas-filesystem-encrypt-type-check
Severity: low
IaC Types: ROS, Terraform

Description​

Ensures that NAS file systems have encryption enabled (encrypt_type set to 1 or 2).

Reason for Violation​

The NAS file system does not have encryption configured, which may expose data at rest to unauthorized access.

Recommendation​

Set encrypt_type to "1" (NAS-managed encryption) or "2" (KMS encryption) to enable encryption for the NAS file system.

Resource Types​

  • ROS: ALIYUN::NAS::FileSystem
  • Terraform: alicloud_nas_file_system