Add new check glue_ml_transform_encryption_at_rest_enabled

[puchy22]

New feature motivation

Implement a control that checks whether AWS Glue machine learning (ML) transforms are encrypted at rest. The control fails if the ML transform data is not encrypted at rest.

Encryption of data at rest ensures the confidentiality of data stored in persistent storage. This protection helps mitigate the risk of unauthorized access and maintains the security of sensitive information processed by ML transforms.

Solution Proposed

Create a new check to ensure that Glue ML transform are encrypted at rest. Things to add:

• Add ml_transforms dictionary (crafted ARN should be the key) with all ML transform extracted from get_ml_transforms and test it.
• Add check logic to verify that MlUserDataEncryptionMode is not DISABLED. Ref
• Add unit tests to ensure the check is working as expected. Cases recommended: no ML Transforms, transform without encryption enabled and transform with encryption enabled. Ref

Describe alternatives you've considered

No alternative.

Additional context

No response

[LefterisXefteris]

Hello @puchy22 ! i would like to work for it if that is okay.

[puchy22]

@LefterisXefteris perfect, I assign you the issue. Thanks for your help 💚 🚀

[LefterisXefteris]

@puchy22 thank you very much!

[puchy22]

Issue closed with #5272