KICS Scan Result

KICS development Scanned paths: /path/test/fixtures/test_critical_custom_queries/amazon_mq_broker_encryption_disabled/query, /path/test/fixtures/test_critical_custom_queries/amazon_mq_broker_encryption_disabled/test Platforms: CloudFormationStart time: 18:49:07, Sep 18 2025 End time: 18:49:07, Sep 18 2025

Vulnerabilities:

AmazonMQ Broker Encryption Disabled

Platform: CloudFormation CWE: 22 Risk Score: 8.5 Category: Encryption

AmazonMQ Broker should have Encryption Options definedhttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html#cfn-amazonmq-broker-encryptionoptions

Results (1)

File: test\fixtures\test_critical_custom_queries\amazon_mq_broker_encryption_disabled\test\positive1.yaml Line 6

Expected: Resources.BasicBroker.Properties.EncryptionOptions should be defined Found: Resources.BasicBroker.Properties.EncryptionOptions is not defined

Type: "AWS::AmazonMQ::Broker"
Properties:
AutoMinorVersionUpgrade: "false"

KICS is open and will always stay such. Both the scanning engine and the security queries are clear and open for the software development community.