Amazon Athena

1.9: AWS Athena Query Results are Not Stored Encrypted

📘 Storing AWS Athena query results without encryption exposes them to potential unauthorized access and compromises data security. Encryption is essential to protect sensitive information contained in query results.

Section: Encryption
Severity: High
CWE: CWE-311 Missing Encryption of Sensitive Data
Assurance Scope: PCI, NIST
Threat Modeling Principal: Tampering, Information Disclosure
Rule Set: Threat Modeling - Cloud Configuration Check

1.10: AWS Athena Query Results are Not Encrypted with the Customer Master Key (CMK)

📘 Failing to encrypt AWS Athena query results with the Customer Master Key (CMK) limits data security control. Using CMKs for encryption provides enhanced security and key management capabilities.

Section: Encryption
Severity: High
CWE: CWE-653 Insufficient Compartmentalization
Assurance Scope: PCI, NIST
Threat Modeling Principal: Tampering, Information Disclosure
Rule Set: Threat Modeling - Cloud Configuration Check