iac/terraform/tf-unencrypted-storage

Storage encryption disabled

mediumTerraformiac-terraform

What it detects

An explicit `storage_encrypted = false` / `encrypted = false` leaves data at rest unencrypted on RDS, EBS, or similar resources. Encryption at rest is free on AWS and expected by most compliance baselines.

Remediation

Set the encryption flag to `true` (and supply a KMS key where the resource supports one).

How it runs

Detection layer not documented.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.