Custom EventBridge bus should use a KMS key for encryption

What it checks

Custom EventBridge bus: no KMS key is configured.

Where it applies

Terraform: aws_cloudwatch_event_bus

CloudFormation: AWS::Events::EventBus

How to fix it

1. Create a KMS CMK and set kms_key_identifier on the custom EventBridge bus.

Frameworks

• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules