Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Cloud Search Service/ Disk Encryption Is Enabled for CSS Clusters
Updated on 2025-01-20 GMT+08:00

Disk Encryption Is Enabled for CSS Clusters

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

css-cluster-disk-encryption-check

Identifier

css-cluster-disk-encryption-check

Description

If disk encryption is not enabled for a CSS cluster, this cluster is noncompliant.

Tag

css

Trigger Type

Configuration change

Filter Type

css.clusters

Configure Rule Parameters

None

Applicable Scenario

Disk encryption is helpful for data protection, especially when there is sensitive data.

Solution

Currently, CSS does not support disk encryption. Do not store sensitive data in CSS clusters.

Rule Logic

  • If disk encryption is disabled for a CSS cluster, this cluster is noncompliant.
  • If disk encryption is enabled for a CSS cluster, this cluster is compliant.