Kinesis Data Stream should use KMS server-side encryption

What it checks

Kinesis Data Stream should use KMS server-side encryption

Where it applies

Terraform: aws_kinesis_stream

CloudFormation: AWS::Kinesis::Stream

How to fix it

1. Set encryption_type = "KMS" and kms_key_id = <cmk arn>. Can be applied to an existing stream without interruption.

Frameworks

• AWS FSBP Kinesis.1
• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules