Skip to content

Commit

Permalink
Update to CIS 1.4 Parameter
Browse files Browse the repository at this point in the history
  • Loading branch information
lculotta committed Oct 11, 2021
1 parent 378ecef commit 4c1c217
Showing 1 changed file with 15 additions and 15 deletions.
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
##################################################################################
#
# Conformance Pack:
# Operational Best Practices for CIS AWS Foundations Benchmark Level 2
#
# This conformance pack helps verify compliance with CIS AWS Foundations Benchmark Level 2 requirements.
#
# See Parameters section for names and descriptions of required parameters.
#
#
# Conformance Pack:
# Operational Best Practices for CIS AWS Foundations Benchmark Level 2
#
# This conformance pack helps verify compliance with CIS AWS Foundations Benchmark Level 2 requirements.
#
# See Parameters section for names and descriptions of required parameters.
#
##################################################################################

Parameters:
Expand Down Expand Up @@ -35,7 +35,7 @@ Parameters:
Default: 'true'
Type: String
IamPolicyInUseParamPolicyARN:
Default: arn:aws:iam::aws:policy/AWSSupportAccesss
Default: arn:aws:iam::aws:policy/AWSSupportAccess
Type: String
IamUserUnusedCredentialsCheckParamMaxCredentialUsageAge:
Default: '45'
Expand Down Expand Up @@ -618,47 +618,47 @@ Resources:
AlarmConsoleAuthFailures:
Properties:
ConfigRuleName: alarm-console-auth-failures
Description: Ensure a log metric filter and an alarm exists for AWS Management Console authentication failures.
Description: Ensure a log metric filter and an alarm exists for AWS Management Console authentication failures.
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Type: AWS::Config::ConfigRule
AlarmKmsDisableOrDeleteCmk:
Properties:
ConfigRuleName: alarm-kms-disable-or-delete-cmk
Description: Ensure a log metric filter and an alarm exists for disabling or scheduled deletion of customer created CMKs.
Description: Ensure a log metric filter and an alarm exists for disabling or scheduled deletion of customer created CMKs.
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Type: AWS::Config::ConfigRule
AlarmAwsConfigChange:
Properties:
ConfigRuleName: alarm-aws-config-change
Description: Ensure a log metric filter and an alarm exists for AWS Config configuration changes.
Description: Ensure a log metric filter and an alarm exists for AWS Config configuration changes.
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Type: AWS::Config::ConfigRule
AlarmVpcSecrityGroupChange:
Properties:
ConfigRuleName: alarm-vpc-secrity-group-change
Description: Ensure a log metric filter and an alarm exists for security group changes.
Description: Ensure a log metric filter and an alarm exists for security group changes.
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Type: AWS::Config::ConfigRule
AlarmVpcNaclChange:
Properties:
ConfigRuleName: alarm-vpc-nacl-change
Description: Ensure a log metric filter and an alarm exists for changes to Network Access Control Lists (NACL).
Description: Ensure a log metric filter and an alarm exists for changes to Network Access Control Lists (NACL).
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Type: AWS::Config::ConfigRule
VpcPeeringLeastAccess:
Properties:
ConfigRuleName: vpc-peering-least-access
Description: Ensure the routing tables for Amazon VPC peering are "least access". Within the VPC section of the console, examine the route table entries to ensure that the least number of subnets or hosts are required to accomplish the purpose for peering are routable.
Description: Ensure the routing tables for Amazon VPC peering are "least access". Within the VPC section of the console, examine the route table entries to ensure that the least number of subnets or hosts are required to accomplish the purpose for peering are routable.
Source:
Owner: AWS
SourceIdentifier: AWS_CONFIG_PROCESS_CHECK
Expand Down

0 comments on commit 4c1c217

Please sign in to comment.