Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Graph Engine Service/ GES Graphs Are Encrypted Using KMS
Updated on 2025-01-20 GMT+08:00
View PDF
Share

GES Graphs Are Encrypted Using KMS

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

ges-graphs-encrypted-check

Identifier

ges-graphs-encrypted-check

Description

If a GES graph is not encrypted using KMS, this graph is noncompliant.

Tag

ges

Trigger Type

Configuration change

Filter Type

ges.graphs

Configure Rule Parameters

None

Applicable Scenario

This rule ensures that your GES graphs are encrypted using KMS to protect data and reduce the risk of unauthorized data access.

Solution

When creating a GES graph, use KMS to encrypt the graph instance. For details, see Creating a Graph Without Using a Template.

Rule Logic

  • If a GES graph is not encrypted using KMS, this graph is noncompliant.
  • If a GES graph is encrypted using KMS, this graph is noncompliant.
Parent topic: Graph Engine Service