# SonarCloud detects "Encryption at Transit" and "Traceability" security problems on AWS resources

**URL:** <https://community.sonarsource.com/t/sonarcloud-detects-encryption-at-transit-and-traceability-security-problems-on-aws-resources/53580>\
**Category:** Sonar Updates\
**Tags:** cloudformation, terraform, aws, iac, security\
**Created:** [November 22, 2021, 8:21pm UTC](https://community.sonarsource.com/t/sonarcloud-detects-encryption-at-transit-and-traceability-security-problems-on-aws-resources/53580 "2021-11-22T20:21:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alexandre\_Gigleux](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/alexandre_gigleux/32/26_2.png) [@Alexandre\_Gigleux](https://community.sonarsource.com/u/Alexandre_Gigleux)\
**Post date:** [November 22, 2021, 8:21pm UTC](https://community.sonarsource.com/t/sonarcloud-detects-encryption-at-transit-and-traceability-security-problems-on-aws-resources/53580/1 "2021-11-22T20:21:52Z")

</div>

Hello CloudFormation and Terraform developers,

After the support of the Encryption at Rest and Permission domains, we are now happy to announce that SonarCloud covers the 5 major domains where security problems can be introduced in Infrastructure as Code AWS files:

- AWS S3 Buckets
- Permissions
- Encryption at Rest
- Encryption in Transit
- Traceability

These domains are covered for CloudFormation and Terraform for AWS and the full list of rules is visible here:

- [https://rules.sonarsource.com/cloudformation](https://rules.sonarsource.com/cloudformation): 27 rules
- [https://rules.sonarsource.com/terraform](https://rules.sonarsource.com/terraform): 26 rules

_Note: if you are a SonarQube user, don’t worry we got you covered as the same features are available with the recently released [SonarQube 9.2](https://www.sonarqube.org/sonarqube-9-2/)._

Alex
