Query: Kinesis firehose delivery streams should have server side encryption enabled

Description

Enable server side encryption (SSE) of your Kinesis firehose delivery stream, in order to protect your data and metadata from breaches or unauthorized access, and fulfill compliance requirements for data-at-rest encryption within your organization.

Query

Tables used in this query:

• aws_kinesis_firehose_delivery_stream

Controls using this query:

• 1 Firehose delivery streams should be encrypted at rest
• Kinesis firehose delivery streams should have server side encryption enabled

SQL