Skip to main content

๐Ÿง  AWS SNS Topic is not encrypted with a KMS key - prod.logic.yaml๐ŸŸข

Usesโ€‹

Test Results ๐ŸŸขโ€‹

Generated at: 2025-11-20T13:29:00.684078450Z Open

ResultIdCondition IndexCondition TextRuntime Error
๐ŸŸขtest1โœ”๏ธ 99โœ”๏ธ isDisappeared(CA10__disappearanceTime__c)โœ”๏ธ null
๐ŸŸขtest2โœ”๏ธ 199โœ”๏ธ extract('CA10__kmsKeyId__c').isEmpty()โœ”๏ธ null
๐ŸŸขtest3โœ”๏ธ 200โœ”๏ธ otherwiseโœ”๏ธ null

Generation Bundleโ€‹

FileMD5
Open/ce/ca/aws/sns/topic-encryption-with-kms/policy.yaml37A0660D72CDB8DD860EA331DEBFF433
Open/ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml04049452250FC7877F1EDBD98716840D
Open/ce/ca/aws/sns/topic-encryption-with-kms/test-data.json9B2E4DCC5D0256D503FD961124DD0604
Open/types/CA10__CaAwsTopic__c/object.extracts.yaml45386FEBF083828D3A2C75CB7251C2D6

Available Commandsโ€‹

repo-manager policies generate FULL /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml

Contentโ€‹

Open File

---
inputType: "CA10__CaAwsTopic__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10__CaAwsTopic__c/object.extracts.yaml"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "The SNS Topic is not encrypted with a KMS key."
remediationMessage: "Consider enabling server-side encryption (SSE) using a KMS key."
check:
IS_EMPTY:
arg:
EXTRACT: "CA10__kmsKeyId__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The SNS Topic is encrypted with a KMS key."