AWS Kinesis streams are encrypted using Server-Side Encryption (SSE) in order to meet strict regulatory requirements and improve the security of your data at rest
Remediation
1. Sign in to the AWS Management Console.
2. Navigate to Kinesis dashboard.
3. In the navigation panel, under Amazon Kinesis, choose Streams.
4. Select the Kinesis stream that you want to examine, click the Actions dropdown button and select Details to open the stream configuration page.
5. Select the Details tab from the top panel, locate the Server-side encryption section and click the Edit button next to it:
6. Select Enabled and choose (Default) aws/kinesis from the KMS master key dropdown menu.