---
type: post-synth-check
title: WAW025
description: SNS topic is not encrypted — add KmsMasterKeyId for encryption at rest
id: WAW025
severity: error
category: post-synth
lexicon: aws
docs: https://intentius.io/chant/lexicons/aws/rules/
---
SNS topic is not encrypted — add KmsMasterKeyId for encryption at rest

## Applies to

- [Topic](/types/Topic.md)
- [Type](/types/Type.md)