Glue catalog database table with JSON classifier should use SSE-KMS

What it checks

Glue catalog database table with JSON classifier should use SSE-KMS

Where it applies

Terraform: aws_glue_catalog_table

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Update catalog_encryption_mode on the existing account/Region encryption settings, or add settings only if absent. Use SSE-KMS or SSE-KMS-WITH-SERVICE-ROLE for catalog metadata.

Frameworks

• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules