MEDIUM

Ensure DynamoDB tables are encrypted with KMS CMK

DynamoDB tables should be encrypted using customer managed KMS keys for additional control.

Security Impact

AWS owned keys lack fine-grained access control and auditing.

How to Remediate

Enable encryption with KMS CMK when creating tables. Update existing tables to use CMK.

Affected Resources

AWS::DynamoDB::Table

Compliance Frameworks

SOC 2PCI-DSSHIPAAGDPR

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Amazon DynamoDB resources across your AWS accounts every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2, PCI-DSS, HIPAA compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
aws-dynamodb-1
Service
Amazon DynamoDB
Category
Encryption
Severity
MEDIUM

Automate This Check

TigerGate automatically scans your AWS environment for this and 575+ other security checks.

Start Free Trial

Related Amazon DynamoDB Checks

View all checks
aws-dynamodb-2high

Ensure DynamoDB tables have point-in-time recovery enabled

aws-dynamodb-3medium

Ensure DynamoDB tables have deletion protection enabled

aws-dynamodb-4low

Ensure DynamoDB auto-scaling is configured

aws-dynamodb-5medium

Ensure DynamoDB streams are encrypted

aws-dynamodb-6medium

Ensure DynamoDB global tables use proper replication