๐ง AWS SNS Topic is not encrypted with a KMS key - prod.logic.yaml๐ข
- Contextual name: ๐ง prod.logic.yaml๐ข
- ID:
/ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml - Tags:
- ๐ข Logic test success
- ๐ข Logic with extracts
- ๐ข Logic with test data
Usesโ
- ๐ AWS SNS Topic
- ๐ AWS SNS Topic - object.extracts.yaml
- ๐งช test-data.json
Test Results ๐ขโ
Generated at: 2025-11-20T13:29:00.684078450Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| ๐ข | test1 | โ๏ธ 99 | โ๏ธ isDisappeared(CA10__disappearanceTime__c) | โ๏ธ null |
| ๐ข | test2 | โ๏ธ 199 | โ๏ธ extract('CA10__kmsKeyId__c').isEmpty() | โ๏ธ null |
| ๐ข | test3 | โ๏ธ 200 | โ๏ธ otherwise | โ๏ธ null |
Generation Bundleโ
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/sns/topic-encryption-with-kms/policy.yaml | 37A0660D72CDB8DD860EA331DEBFF433 |
| Open | /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml | 04049452250FC7877F1EDBD98716840D |
| Open | /ce/ca/aws/sns/topic-encryption-with-kms/test-data.json | 9B2E4DCC5D0256D503FD961124DD0604 |
| Open | /types/CA10__CaAwsTopic__c/object.extracts.yaml | 45386FEBF083828D3A2C75CB7251C2D6 |
Available Commandsโ
repo-manager policies generate FULL /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/sns/topic-encryption-with-kms/prod.logic.yaml
Contentโ
---
inputType: "CA10__CaAwsTopic__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10__CaAwsTopic__c/object.extracts.yaml"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "The SNS Topic is not encrypted with a KMS key."
remediationMessage: "Consider enabling server-side encryption (SSE) using a KMS key."
check:
IS_EMPTY:
arg:
EXTRACT: "CA10__kmsKeyId__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The SNS Topic is encrypted with a KMS key."