forked from aws-cloudformation/aws-guard-rules-registry
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathrule_set_cis_aws_benchmark_level_1.json
100 lines (100 loc) · 2.28 KB
/
rule_set_cis_aws_benchmark_level_1.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
{
"owner": "AWS",
"ruleSetName": "cis-aws-benchmark-level-1",
"version": "1.0.0",
"description": "AWS Guard rule set for Center for Internet Security (CIS) Amazon Web Services Foundation v1.4 Level 1",
"contact": "aws-guard-rules-registry@amazon.com",
"mappings": [
{
"guardFilePath": "rules/aws/iam/iam_user_no_policies_check.guard",
"controls": [
"1.15"
]
},
{
"guardFilePath": "rules/aws/iam/iam_no_inline_policy_check.guard",
"controls": [
"1.15"
]
},
{
"guardFilePath": "rules/aws/iam/iam_policy_no_statements_with_admin_access.guard",
"controls": [
"1.16"
]
},
{
"guardFilePath": "rules/aws/amazon_s3/s3_bucket_versioning_enabled.guard",
"controls": [
"2.1.3"
]
},
{
"guardFilePath": "rules/aws/amazon_s3/s3_bucket_level_public_access_prohibited.guard",
"controls": [
"2.1.5",
"3.3"
]
},
{
"guardFilePath": "rules/aws/amazon_ec2/encrypted_volumes.guard",
"controls": [
"2.2.1"
]
},
{
"guardFilePath": "rules/aws/amazon_ec2/ec2_ebs_encryption_by_default.guard",
"controls": [
"2.2.1"
]
},
{
"guardFilePath": "rules/aws/amazon_rds/rds_snapshot_encrypted.guard",
"controls": [
"2.3.1"
]
},
{
"guardFilePath": "rules/aws/amazon_rds/rds_storage_encrypted.guard",
"controls": [
"2.3.1"
]
},
{
"guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_read_prohibited.guard",
"controls": [
"3.3"
]
},
{
"guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_write_prohibited.guard",
"controls": [
"3.3"
]
},
{
"guardFilePath": "rules/aws/cloudtrail/cloud_trail_cloud_watch_logs_enabled.guard",
"controls": [
"3.4"
]
},
{
"guardFilePath": "rules/aws/amazon_s3/s3_bucket_logging_enabled.guard",
"controls": [
"3.6"
]
},
{
"guardFilePath": "rules/aws/amazon_ec2/restricted_ssh.guard",
"controls": [
"5.2"
]
},
{
"guardFilePath": "rules/aws/amazon_ec2/restricted_common_ports.guard",
"controls": [
"5.2"
]
}
]
}