CodeBuild project build artifact encryption should be enabled

What it checks

CodeBuild project: CodeBuild artifact encryption is explicitly disabled.

Where it applies

Terraform: aws_codebuild_project

CloudFormation: AWS::CodeBuild::Project

How to fix it

1. Remove encryption_disabled = true or set it to false. CodeBuild will use the project's configured KMS key, or its default AWS managed key for Amazon S3. Ensure the CodeBuild service role can use that key.

Frameworks

• SOC 2 CC6.1

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules