Is kms_key_id enforced for NIST SP 800-53 Rev 5?

Yes, Ensure that all secrets in AWS Secrets Manager are encrypted using the AWS managed key (aws/secretsmanager) or a customer managed key that was created in AWS Key Management Service (AWS KMS). The rule is compliant if a secret is encrypted using a customer managed key. This rule is non-compliant if a secret is encrypted using aws/secretsmanager.

terraform-aws-modules/secrets-manager/aws for NIST SP 800-53 Rev 5

Registry

Sign inStart free trial

Controls

1 control from NIST SP 800-53 Rev 5 apply to this module.

Control	Clause	Change
Secrets Manager secrets should be encrypted using CMKsecretsmanager_secret_encrypted_with_kms_cmk None	None