Back to Checks
e2enetworks

E2E Networks nodes have disk encryption enabled

node_encryption_enabled
Service: nodeSeverity: high
OfficialBuilt-inVerified
Categories:encryption
Resource Type:NotDefined

E2E Networks nodes should have disk encryption enabled so data stored on node volumes and snapshots is protected at rest.

Prowler logoProwlerprowler-provider-e2enetworks

Risk

Unencrypted nodes increase the risk of data exposure if disks or snapshots are accessed outside normal operating controls.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler e2enetworks --checks node_encryption_enabled

Recommendation

Enable disk encryption on nodes to protect data at rest on volumes and snapshots.

Check Code

from prowler.lib.check.models import Check, CheckReportE2eNetworks
from prowler.providers.e2enetworks.services.node.node_client import node_client


class node_encryption_enabled(Check):
    """Check if E2E Networks nodes have encryption enabled."""

    def execute(self) -> list[CheckReportE2eNetworks]:
        findings = []
        for node in node_client.nodes:
            report = CheckReportE2eNetworks(metadata=self.metadata(), resource=node)
            report.status = "PASS"
            report.status_extended = f"Node {node.name} has encryption enabled."
            if not node.is_encryption_enabled:
                report.status = "FAIL"
                report.status_extended = (
                    f"Node {node.name} does not have encryption enabled."
                )
            findings.append(report)
        return findings

References